Adam Williamson edc4caa833 openqa/server: use custom SELinux policy instead of boolean ...

We've been using the httpd_can_network_connect boolean for years
to allow httpd to connect to the openQA server processes. This
is an unnecessarily large hammer when we only need it to be
able to connect to exactly the two openQA ports. This uses a
custom SELinux policy to allow connecting to those ports only,
and ensures the boolean is set back to off.

Signed-off-by: Adam Williamson <awilliam@redhat.com>

2021-12-14 15:48:34 -08:00

1.1 KiB

Raw History

View raw