Further Freeze Break Request: Fix selinux for memcached+collectd

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I applied the original patch, but selinux is blocking collectd from
connecting to the local memcached instance.

This followup patch should fix that.  Any add-on +1s?

diff --git a/roles/collectd/memcached/tasks/main.yml b/roles/collectd/memcached/tasks/main.yml
index 3023af7..fc0d04f 100644
--- a/roles/collectd/memcached/tasks/main.yml
+++ b/roles/collectd/memcached/tasks/main.yml
@@ -3,6 +3,23 @@
 - name: Copy in the memcached collectd config
   copy: src=memcached.conf dest=/etc/collectd.d/memcached.conf
   tags:
+  - collectd/memcached
   - collectd
   - memcached
   notify: restart collectd
+
+- name: Ensure that semanage is present
+  yum: name=policycoreutils-python state=present
+  tags:
+  - collectd/memcached
+  - collectd
+  - memcached
+  - selinux
+
+- name: lastly, set some selinux booleans
+  seboolean: name=collectd_tcp_network_connect persistent=yes state=yes
+  tags:
+  - collectd/memcached
+  - collectd
+  - memcached
+  - selinux

Attachment: pgpByGN7wOEvB.pgp
Description: PGP signature

_______________________________________________
infrastructure mailing list
infrastructure@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/infrastructure

[Index of Archives]     [Fedora Development]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite News]     [KDE Users]

  Powered by Linux