Skip to content

ENT-14018: Added missing RHEL9 SELinux rules (3.27.x)#6099

Merged
craigcomstock merged 1 commit into
cfengine:3.27.xfrom
aleksandrychev:ENT-14018_3.27.x
May 5, 2026
Merged

ENT-14018: Added missing RHEL9 SELinux rules (3.27.x)#6099
craigcomstock merged 1 commit into
cfengine:3.27.xfrom
aleksandrychev:ENT-14018_3.27.x

Conversation

@aleksandrychev
Copy link
Copy Markdown
Contributor

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:

  • cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
  • cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018

(cherry picked from commit b733ce3)

Moved the common rules from the RHEL 10 policy into cfengine-enterprise.te.all so they apply to all platforms.

Added:
 - cfengine_reactor_t cfsmtp_port_t:tcp_socket name_connect, to be able to send scheduled emails
 - cfengine_hub_t autofs_t:dir getattr (cf-hub calls stat() on /efi automount during inventory)

Ticket: ENT-14018
Signed-off-by: Ihor Aleksandrychiev <ihor.aleksandrychiev@northern.tech>
(cherry picked from commit b733ce3)
@aleksandrychev
Copy link
Copy Markdown
Contributor Author

@cf-bottom jenkins please

@cf-bottom
Copy link
Copy Markdown

@craigcomstock craigcomstock merged commit 86a45e0 into cfengine:3.27.x May 5, 2026
43 of 45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants