diff --git a/0002-selinux-ganesha.te.patch b/0002-selinux-ganesha.te.patch new file mode 100644 index 0000000..c09a71a --- /dev/null +++ b/0002-selinux-ganesha.te.patch @@ -0,0 +1,17 @@ +diff --git a/src/selinux/ganesha.te b/src/selinux/ganesha.te +index 246f9cc8c..6692eedf2 100644 +--- a/src/selinux/ganesha.te ++++ b/src/selinux/ganesha.te +@@ -307,3 +307,12 @@ allow ganesha_t self:capability { fowner setgid setuid }; + # allow ganesha_t glusterd_brick_t:dir { add_name getattr open read write remove_name search }; + # allow ganesha_t glusterd_brick_t:file { create getattr open read write unlink }; + ++######################################## ++# ++# ganesha local policy rhbz#1855350 ++ ++ifdef(`ceph_read_lib_files',` ++ optional_policy(` ++ ceph_read_lib_files(ganesha_t) ++ ') ++')