openstack-ansible-os_neutron/releasenotes/notes/selinux-neutron-bare-metal-c89174daf6f8b273.yaml
Major Hayden 261a789342 Add SELinux policies for bare metal agents
The recent move to bare metal neutron agents brought the processes
spawned by each agent under the watch of SELinux policies. This
patch ensures that neutron can still start important daemons, such
as dnsmasq or haproxy, without causing SELinux AVCs.

Closes-Bug: 1742552
Change-Id: Id1ae9d2b43cd0fb4c38460501da24733b29566e2
2018-01-26 17:47:39 +00:00

7 lines
191 B
YAML

---
fixes:
- |
SELinux policy for neutron on CentOS 7 is now provided to fix SELinux
AVCs that occur when neutron's agents attempt to start daemons such as
haproxy and dnsmasq.