openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update octavia from branch 'master'
  to 21d74c373b92f8711ff91766c2e7c8bcb811bdda
  - Save the HAProxy state outside of its systemd unit
    
    By default, SELinux prevents HAProxy context (haproxy_t) to execute
    shell context (shell_exec_t) for security reasons.
    
    This prevents HAProxy to actually reload properly, since SELinux will
    deny its call to a shell to save its state to a file.
    
    In order to avoid opening a potential security hole in the load-balancer
    image, the best way is to generate the state file before the actual
    reload.
    
    There are more details about the SELinux denials in the associated Red
    Hat Bugzilla.
    
    Resolves: rhbz#2073491
    Change-Id: I6b9a5e1e3bafe77ad9f9506b8c0995d8c2a00081
This commit is contained in:
Cédric Jeanneret 2022-04-20 16:27:14 +02:00 committed by Gerrit Code Review
parent b1a4104722
commit 840e934397
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
octavia

@ -1 +1 @@
Subproject commit bf007ec4a8bf368321b66038388a6bf67c5d22ce
Subproject commit 21d74c373b92f8711ff91766c2e7c8bcb811bdda