[Pacemaker] [RFC] working selinux policy module for pacemaker

Vladislav Bogdanov bubble at hoster-ok.com
Fri Jan 4 00:27:16 EST 2013


04.01.2013 06:07, Andrew Beekhof wrote:
> On Wed, Dec 19, 2012 at 7:33 PM, Vladislav Bogdanov
> <bubble at hoster-ok.com> wrote:
>> Hi all,
>>
>> I'd like to share my successful attempt to confine pacemaker.
>>
>> I took pacemaker module barebone found in latest fedora's selinux-policy (3.11.1-64.fc18) and
>> extended it a bit, so now I have pacemaker and some pacemaker-managed services
>> running confined.
> 
> Sweet. I've passed your amendments on to Milos who is looking after
> https://bugzilla.redhat.com/show_bug.cgi?id=801493

I've extended it a bit more to run stonithd in fenced_t domain, so now
everything I can imagine runs fine (verified on two clusters, including
one with libvirt/qemu virtualization).
Where is the best place to follow up with that?






More information about the Pacemaker mailing list