Skip to content

Commit

Permalink
Drop pulp-2to3 migration support
Browse files Browse the repository at this point in the history
The old policy for this allowed access to files owned by Apache. This is
no longer needed, nor is it needed to connect to MongoDB anymore.
  • Loading branch information
ekohl committed Mar 5, 2024
1 parent ca4a85e commit f782186
Showing 1 changed file with 0 additions and 22 deletions.
22 changes: 0 additions & 22 deletions pulpcore.te
Original file line number Diff line number Diff line change
Expand Up @@ -119,25 +119,6 @@ kernel_dgram_send(pulpcore_server_t)
kernel_read_all_proc(pulpcore_t)
kernel_read_all_proc(pulpcore_server_t)

# pulp-2to3-migration plugin
apache_manage_sys_content_rw(pulpcore_t)
apache_read_sys_content_rw_files(pulpcore_t)

# Not needed during migration, but if a user accesses a migrated on-demand repo
# and therefore causes Pulp to download content, pulpcore-content < 3.15.0
# writes the file to /var/lib/pulp/ with the httpd_sys_rw_content_t label.
# And then the file inherits the httpd_sys_rw_content_t label.
# So remove this line once the policy no longer supports pulpcore < 3.15.0
# https://pulp.plan.io/issues/9000
apache_manage_sys_content_rw(pulpcore_server_t)

# pulp-2to3-migration plugin
apache_read_sys_content_rw_dirs(pulpcore_server_t)

# Not needed during migration, but if hardlinked content is read by
# pulpcore-content after migration, it can still have the old label.
apache_read_sys_content_rw_files(pulpcore_server_t)

auth_use_nsswitch(pulpcore_server_t)
auth_use_nsswitch(pulpcore_t)

Expand All @@ -148,17 +129,14 @@ corecmd_exec_shell(pulpcore_t)
corecmd_exec_bin(pulpcore_server_t)
corecmd_exec_shell(pulpcore_server_t)

# mongod for pulp-2to3-migration plugin
corenet_tcp_connect_http_cache_port(pulpcore_t)
corenet_tcp_connect_http_port(pulpcore_t)
corenet_tcp_connect_mongod_port(pulpcore_t)
corenet_tcp_connect_postgresql_port(pulpcore_t)
corenet_tcp_connect_pulpcore_port(pulpcore_t)
corenet_tcp_connect_redis_port(pulpcore_t)
corenet_tcp_connect_squid_port(pulpcore_t)
corenet_tcp_bind_pulpcore_port(pulpcore_server_t)
corenet_tcp_connect_http_port(pulpcore_server_t)
corenet_tcp_connect_mongod_port(pulpcore_server_t)
corenet_tcp_connect_postgresql_port(pulpcore_server_t)
corenet_tcp_connect_redis_port(pulpcore_server_t)

Expand Down

0 comments on commit f782186

Please sign in to comment.