[Bug 1202090] mdadm / mdmonitor systemd service not allowed to write env (mdadm_env.sh) on SELinux enabled systems

https://bugzilla.suse.com/show_bug.cgi?id=1202090 https://bugzilla.suse.com/show_bug.cgi?id=1202090#c5 --- Comment #5 from Coly Li <colyli@suse.com> --- (In reply to Coly Li from comment #4)
(In reply to Neil Brown from comment #3)
Sorry for not looking at this earlier.
Coly: I think this one is for you. I notice you added 1004-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch to move the mdadm_env.sh out of libexec. Maybe it would be better to change the systemd unit file to run it from libexec instead. Thanks.
Moving LIB_DIR from /usr/libexec/mdadm to /usr/lib/mdadm was because mdadm_env.sh was called in /usr/lib/mdadm by some systemd service, systemd/mdcheck_continue.service:17:ExecStartPre=-/usr/lib/mdadm/mdadm_env.sh systemd/mdmonitor.service:16:ExecStartPre=-/usr/lib/mdadm/mdadm_env.sh systemd/mdcheck_start.service:17:ExecStartPre=-/usr/lib/mdadm/mdadm_env.sh systemd/mdmonitor-oneshot.service:15:ExecStartPre=-/usr/lib/mdadm/mdadm_env.sh If moving mdadm_env.sh back to /usr/libexec/mdadm, let me change the paths from these systemd service files to /usr/lib/mdadm/. Let me do the modification. Coly Li -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com