openstack-selinux

openstack-selinux copied to clipboard

Run the verification even on permissive system

5

That way, it will prevent issues in the current upstream CI, while ensuring we can safely switch back to enforcing later.

cjeanner

The glance-api service requires sudo when cinder backend is used but this has been denied by selinux. ~~~ type=AVC msg=audit(1703084811.884:6481): avc: denied { execute } for pid=72459 comm="sudo" name="unix_chkpwd" dev="vda1"...

kajinamit

lmiccini