From a71c6f3046b0c9694bdfc4701999e5d60aa663db Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <tkajinam@redhat.com>
Date: Fri, 28 Aug 2020 00:16:34 +0900
Subject: [PATCH] [CentOS8] Enable os_neutron_dac_override

We should enable os_neutron_dac_override when installing Neutron,
otherwise privsep helper always fails to start.

Change-Id: I00e9151e7347e71215d36698e8ee3c3e603ce784
---
 manifests/neutron.pp | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/manifests/neutron.pp b/manifests/neutron.pp
index 575b8af76..8bec1fd19 100644
--- a/manifests/neutron.pp
+++ b/manifests/neutron.pp
@@ -41,6 +41,15 @@ class openstack_integration::neutron (
     Exec['update-ca-certificates'] ~> Service['neutron-server']
   }
 
+  if ($::operatingsystem == 'CentOS') and (versioncmp($::operatingsystemmajrelease, '8') == 0) {
+    # os_neutron_dac_override should be on to start privsep-helper
+    # See https://bugzilla.redhat.com/show_bug.cgi?id=1850973
+    selboolean { 'os_neutron_dac_override':
+      persistent => true,
+      value      => on,
+    }
+  }
+
   openstack_integration::mq_user { 'neutron':
     password => 'an_even_bigger_secret',
     before   => Anchor['neutron::service::begin'],