Add selinux module for gitlab-shell
Compare changes
- John Long authored
No preview for this file type
In GitLab version 13.4, gitlab-shell was changed to go through Workhorse. Reference: !4498 (merged). This change results in database ssh key lookups on RHEL based distributions with selinux enforcing. This MR adds a module to apply contexts for selinux to allow SSH to go through the Workhorse unix socket.
Currently, users with GitLab version 13.4 using fast ssh lookup can get a permission denied when using git ssh commands. This is due to missing rules for selinux to allow database ssh lookups through the Workhorse socket.
The Type Enforcement file was generated by running the command ausearch -c 'gitlab-shell-au' --raw | audit2allow -M gitlab-13.5.0-gitlab-shell
.
See Definition of done.
For anything in this list which will not be completed, please provide a reason in the MR discussion
trigger-package
has a green pipeline running against latest commit