bifrost/releasenotes/notes/deploy-with-selinux-enabled-6c155cfa8f8720c0.yaml
Yolanda Robla Mota c7e513243d Allow bifrost to work with selinux enabled
Currently when selinux is enabled, nginx fails with permission
denied on /httpboot, and could not bind to address errors.
To fix port issues: add the right rule to selinux
To fix permission issues: add the right policies and custom
modules to selinux

Change-Id: Ieb5afe758981940a04c5076d2cebd6746db57da1
2016-11-16 17:36:39 +01:00

10 lines
336 B
YAML

---
features:
- Currently bifrost deployments on RedHat/Suse systems
had to be performed with selinux at least in
permissive mode. This patch adds the right policies
to allow to run with selinux in enforcing mode.
security:
- This increases security, because allows to run
on systems with selinux in enforcing mode.