bifrost/releasenotes/notes/selinux-tftp-c37e34311238f8fd.yaml
Steve Baker 0baff1e124 Fix TFTP read access for enforcing SELinux
This change adds ironic_tftp_master_path to the list of paths to get
the tftpdir_t context, so that images copied from here to
tftp_boot_folder will have a context which allows the file to be read.

This change also applies the context changes when SELinux is in
Permissive mode, as well as Enforcing.

Change-Id: I43dd4a2f7cf47934bc9f5cdee85acf53a40dd468
2022-08-01 12:38:03 +12:00

7 lines
262 B
YAML

---
fixes:
- |
An issue has been fixed where enforcing SELinux resulted in files in
``tftp_boot_folder`` not being readable by dnsmasq. This has been fixed by
ensuring files in ``ironic_tftp_master_path`` have the SELinux context
``tftpdir_t``.