Project

General

Profile

Actions

Bug #30988

open

remote_execution default ssh key location does not work with selinux

Added by Adam Winberg over 3 years ago.

Status:
New
Priority:
Normal
Assignee:
-
Category:
Smart Proxy
Target version:
-
Difficulty:
Triaged:
No
Fixed in Releases:
Found in Releases:

Description

By default the ssh keys used for Foreman REX is located at /usr/share/foreman-proxy/.ssh/. With rubygem-smart_proxy_remote_execution_ssh-0.3.0-4.fm2_1.el8.noarch this location is symlinked to /var/lib/foreman-proxy/ssh, which results in the keys getting a selinux context of 'var_lib_t', which foreman-proxy cant read.

Setting the selinux label to 'ssh_home_t', as advised in the manual, does not work either since there is no selinux policy allowing this access. Am I missing something here, how is foreman-proxy supposed to read the ssh keys with selinux enabled?

No data to display

Actions

Also available in: Atom PDF