Commit d6a120d
committed
Moved standard library paths and inventory bundles from common to agent type to simplify SELinux policy
This should simplify selinux policy where we want the agent to have broad access but other components like serverd, execd, hub to have more limited access.
The paths bundle checks for the existence of many commands and this operation can cause SELinux AVCs.
The inventory bundle uses the curl command to see if the host is an AWS instance and if so collects some inventory from a well known API/IP.
As far as I can tell there isn't a need for the vars/classes defined in paths and inventory in components other than agent so this change should be OK.
Ticket: ENT-12954
Changelog: title1 parent 2cb3f4d commit d6a120d
2 files changed
+3
-3
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
| 1 | + | |
2 | 2 | | |
3 | 3 | | |
4 | 4 | | |
| |||
593 | 593 | | |
594 | 594 | | |
595 | 595 | | |
596 | | - | |
| 596 | + | |
597 | 597 | | |
598 | 598 | | |
599 | 599 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | 1 | | |
2 | 2 | | |
3 | | - | |
| 3 | + | |
4 | 4 | | |
5 | 5 | | |
6 | 6 | | |
| |||
0 commit comments