Add security context service (#13218)

* Make sure we add bin_t type to service for restricted SELinux policies

* Make sure we add bin_t type to service for restricted SELinux policies
This commit is contained in:
Orsiris de Jong
2021-09-10 15:19:35 +02:00
committed by GitHub
parent c5b63bde86
commit d42444b4ae

View File

@@ -423,6 +423,7 @@ Feel free to tune the performance settings in librenms.conf to meet your needs.
```
semanage fcontext -a -t httpd_sys_content_t '/opt/librenms/html(/.*)?'
semanage fcontext -a -t httpd_sys_rw_content_t '/opt/librenms/(logs|rrd|storage)(/.*)?'
semanage fcontext -a -t bin_t '/opt/librenms/librenms-service.py'
restorecon -RFvv /opt/librenms
setsebool -P httpd_can_sendmail=1
setsebool -P httpd_execmem 1