Commit 1cff95d
committed
Modified several common bundles to be agent bundles to limit access in SELinux policy
This should simplify selinux policy where we want the agent to have broad access but other components like serverd, execd, hub to have more limited access.
The paths bundle checks for the existence of many commands and this operation can cause SELinux AVCs.
The inventory bundle uses the curl command to see if the host is an AWS instance and if so collects some inventory from a well known API/IP.
The cfe_internal_hub_vars needs to determine if php-fpm executable is present.
As far as I can tell there isn't a need for the vars/classes defined in paths and inventory in components other than agent so this change should be OK.
Ticket: ENT-12954
Changelog: title
more common to agent fixes1 parent 2cb3f4d commit 1cff95d
File tree
3 files changed
+5
-5
lines changed- cfe_internal/enterprise
- inventory
- lib
3 files changed
+5
-5
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
15 | 15 | | |
16 | 16 | | |
17 | 17 | | |
18 | | - | |
| 18 | + | |
19 | 19 | | |
20 | 20 | | |
21 | 21 | | |
| |||
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
30 | | - | |
| 30 | + | |
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
593 | 593 | | |
594 | 594 | | |
595 | 595 | | |
596 | | - | |
| 596 | + | |
597 | 597 | | |
598 | 598 | | |
599 | 599 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | | - | |
| 3 | + | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| |||
0 commit comments