summaryrefslogtreecommitdiffstats
path: root/base/deploy/src/scriptlets/selinux_setup.py
Commit message (Collapse)AuthorAgeFilesLines
* Run restorecon on top-level log directoryNathan Kinder2012-12-041-0/+1
| | | | | | | | | | | We currently run a restorecon on the instance log directory, but not on the top level log directory. Restorecon is required for the top level log directory since pkispawn creates it. Without running a restorecon, it gets the label of the parent directory (var_log_t) instead of consulting the fcontext rule in the base policy and using pki_var_log_t. Ticket #431
* Allow a PKI instance to be installed/configured independentlyMatthew Harmsen2012-10-301-3/+7
| | | | | * TRAC Ticket #286 - Dogtag 10: Create parameter for optionally allowing a user to skip configuration . . .
* Added pki_tomcat_cert_t type and interface to access itAde Lee2012-10-101-0/+11
| | | | | Added permissions to certmonger to access the certdb. Also added some missing selinux permissions for pki_tomcat_t
* Fixed SELinux error during pkidestroy.Endi Sukma Dewata2012-09-121-28/+68
| | | | | | | | | When removing a subsystem the pkidestroy would also remove the SELinux contexts for the instance regardless of whether there are still other subsystems in the instance. The code has been fixed such that it's removing the SELinux contexts when deleting the last subsystem only. Ticket #89
* Selinux policy for new configuration.Ade Lee2012-07-251-0/+107
Added tomcat_t for java processes. Added aliases for old types to allow compatibility of existng subsystems. Added install scripts for pkispawn and pkidestroy