[openstack-dev] [puppet] puppet-keystone to setup SELinux booleans if running in httpd

Lukas Bezdicka lbezdick at redhat.com
Wed Jul 29 10:40:39 UTC 2015


I have review [1] where I turn on SELinux booleans if we are running keystone in httpd. I'm for doing this in puppet as package should not set configuration especially system wide one, where we allow httpd to access databases and to bind to keystone ports. I'd like to hear your opinions on this subject and I hope we get to some conclusion.


[1] - https://review.openstack.org/#/c/201229/

More information about the OpenStack-dev mailing list