Commits on Mar 21, 2024

1. Fix sudo by glance-api …

   The glance-api service requires sudo when cinder backend is used but
   this has been denied by selinux.
   
   ~~~
   type=AVC msg=audit(1703084811.884:6481): avc:  denied  { execute } for  pid=72459 comm="sudo" name="unix_chkpwd" dev="vda1" ino=4700890 scontext=system_u:system_r:glance_api_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=0
   type=AVC msg=audit(1703084818.067:6524): avc:  denied  { execute } for  pid=72505 comm="sudo" name="unix_chkpwd" dev="vda1" ino=4700890 scontext=system_u:system_r:glance_api_t:s0 tcontext=system_u:object_r:chkpwd_exec_t:s0 tclass=file permissive=0
   ~~~
   
   This fixes the denial and ensures sudo is actually allowed.
   
   Resolves: rhbz#2255412

   

   kajinamit committed Mar 21, 2024
   Configuration menu

   • View commit details
   • Copy full SHA for b261ebf
   • Browse repository at this point

   Copy the full SHA

   b261ebf View commit details

   Browse the repository at this point in the history