[Bugs] [Bug 1463641] [Ganesha] Ganesha service failed to start on new node added in existing ganeshacluster

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1463641



--- Comment #5 from Worker Ant <bugzilla-bot at gluster.org> ---
COMMIT: https://review.gluster.org/17597 committed in release-3.10 by Kaleb
KEITHLEY (kkeithle at redhat.com) 
------
commit 5ad6e1e07f5304deb022ebd54dbbdac6f9c651fb
Author: Kaleb S. KEITHLEY <kkeithle at redhat.com>
Date:   Wed Jun 21 10:01:20 2017 -0400

    common-ha: enable and disable selinux ganesha_use_fusefs

    Starting in Fedora 26 and RHEL 7.4 there are new targeted policies
    in selinux which include a tuneable to allow ganesha.nfsd to access
    the gluster (FUSE) shared_storage volume where ganesha maintains its
    state.

    N.B. rpm doesn't have a way to distinguish between RHEL 7.3 or 7.4
    so it can't be enabled for RHEL at this time. /usr/sbin/semanage is
    in policycoreutils-python in RHEL (versus policycoreutils-python-utils
    in Fedora.) Once RHEL 7.4 GAs we may also wish to specify the version
    for RHEL 7 explicitly, i.e.
      Requires: selinux-policy >= 3.13.1-160.
    But beware, the corresponding version in Fedora 26 seems to be
    selinux-policy-3.13.1.258 or so. (Maybe earlier versions, but that's
    what's currently in the F26 beta.

    release-3.10 is the upstream master branch for glusterfs-ganesha. For
    release-3.11 and later storhaug needs a similar change, which is
    tracked by https://github.com/linux-ha-storage/storhaug/issues/11

    Maybe at some point we would want to consider migrating the targeted
    policies for glusterfs (and nfs-ganesha) from selinux-policy to a
    glusterfs-selinux (and nfs-ganesha-selinux) subpackage?

    Change-Id: I04a5443edd00636cbded59a2baddfa98095bf7ac
    BUG: 1463641
    Signed-off-by: Kaleb S. KEITHLEY <kkeithle at redhat.com>
    Reviewed-on: https://review.gluster.org/17597
    Smoke: Gluster Build System <jenkins at build.gluster.org>
    Reviewed-by: Niels de Vos <ndevos at redhat.com>
    Reviewed-by: jiffin tony Thottan <jthottan at redhat.com>
    CentOS-regression: Gluster Build System <jenkins at build.gluster.org>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=rIszzqAN6m&a=cc_unsubscribe