What | Removed | Added |
---|---|---|
Status | NEW | RESOLVED |
Resolution | --- | FIXED |
I honestly don't remember what labels we had on RHEL 6, did we have SELinux set as enforcing at all with the previous install? Anyway https://infrastructure.gnome.org/browse/puppet/commit/?id=12364b1cdfebbdf43a511e463c7ad8771a569fc5 seems to have helped and audit.log seems to be quiet now. New files should inherit the context from their parent directories and in case that won't happen Puppet will run and have it fixed. The new contexts should also survive a restorecon or .autorelabel as the custom contexts have been made permanent.