freeipa

#6924 Fix SELinux contex of http.keytab during upgrade
Closed: fixed Opened by mbasti.

Closed: fixed
Reopen Issue

During upgrate the http.keytab is moved to a new location but with incorrect SELinux context. Operation copy and remove should be used instead of move to restore context properly.

Note from SELinux team:

Label of http.keytab is preserved, this should be change and label for http.keytab should be ipa_var_lib_t instead of httpd_config_t.

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1447703

Metadata Update from @pvoborni:
- Custom field rhbz adjusted to https://bugzilla.redhat.com/show_bug.cgi?id=1447703

Issue linked to bug 1447703

Metadata Update from @mbasti:
- Issue assigned to mbasti

master:

  • 7f4c2fbd975d09c01e6898a4eb70d7dfea1171b4 Use proper SELinux context with http.keytab
    ipa-4-5:

  • bda733db9ede3307595963a8c086e1b700c41e25 Use proper SELinux context with http.keytab

Metadata Update from @mbabinsk:
- Issue close_status updated to: fixed
- Issue status updated to: Closed (was: Open)

Metadata Update from @mbasti:
- Issue set to the milestone: FreeIPA 4.5.1
Metadata
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.