summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorWenzong Fan <wenzong.fan@windriver.com>2015-03-05 15:50:19 +0800
committerJoe MacDonald <joe_macdonald@mentor.com>2015-04-16 13:50:23 -0400
commit428a255644d0e385c9512bdd1919c452b4d00e01 (patch)
tree621252d47ff9100ecd9f77e2316499e90e96196e
parentb2c18b5a8178931b461f58a1dcd27ad3ec6aaebb (diff)
downloadmeta-selinux-fido.tar.gz
iscsi-initiator-utils: fix label for initiatorname.iscsifido
This config file was created by postinstall or initscript, the correct label should be "etc_t", run restorecon /etc/iscsi/initiatorname.iscsi to fix it and remove below avc denied issues: avc: denied { read } for pid=6094 comm="iscsid" \ name="initiatorname.iscsi" dev="sda3" ino=1057846 \ scontext=system_u:system_r:iscsid_t:s0-s15:c0.c1023 \ tcontext=system_u:object_r:etc_runtime_t:s0 tclass=file Signed-off-by: Wenzong Fan <wenzong.fan@windriver.com> Signed-off-by: Joe MacDonald <joe_macdonald@mentor.com>
-rw-r--r--networking-layer/recipes-daemons/iscsi-initiator-utils/files/initd.debian123
-rw-r--r--networking-layer/recipes-daemons/iscsi-initiator-utils/iscsi-initiator-utils_%.bbappend1
2 files changed, 124 insertions, 0 deletions
diff --git a/networking-layer/recipes-daemons/iscsi-initiator-utils/files/initd.debian b/networking-layer/recipes-daemons/iscsi-initiator-utils/files/initd.debian
new file mode 100644
index 0000000..43fb348
--- /dev/null
+++ b/networking-layer/recipes-daemons/iscsi-initiator-utils/files/initd.debian
@@ -0,0 +1,123 @@
1#! /bin/sh
2### BEGIN INIT INFO
3# Provides:
4# Required-Start:
5# Required-Stop:
6# Default-Start:
7# Default-Stop:
8# Short-Description: Starts and stops the iSCSI initiator services and logins to default targets
9### END INIT INFO
10#set -x
11PATH=/sbin:/bin:/usr/sbin:/usr/bin
12DAEMON=/usr/sbin/iscsid
13ADM=/usr/sbin/iscsiadm
14PIDFILE=/var/run/iscsid.pid
15
16[ -x "$DAEMON" ] || exit 0
17
18if [ ! -d /sys/class/ ]; then
19 echo "Failure:" "iSCSI requires a mounted sysfs, not started."
20 exit 1
21fi
22
23nodestartup_re='s/^node\.conn\[0]\.startup[ ]*=[ ]*//p'
24
25RETVAL=0
26
27start() {
28 echo "Starting iSCSI initiator service" "iscsid"
29 modprobe -q iscsi_tcp 2>/dev/null || :
30 modprobe -q ib_iser 2>/dev/null || :
31 if [ ! -f /etc/iscsi/initiatorname.iscsi ]; then
32 INITIATORNAME=$(iscsi-iname)
33 cat >/etc/iscsi/initiatorname.iscsi <<EOF
34## DO NOT EDIT OR REMOVE THIS FILE!
35## If you remove this file, the iSCSI daemon will not start.
36## If you change the InitiatorName, existing access control lists
37## may reject this initiator. The InitiatorName must be unique
38## for each iSCSI initiator. Do NOT duplicate iSCSI InitiatorNames.
39InitiatorName=$INITIATORNAME
40EOF
41 fi
42
43 # Fix label for /etc/iscsi/initiatorname.iscsi if SELinux was enabled
44 test ! -x /sbin/restorecon || /sbin/restorecon -F /etc/iscsi/initiatorname.iscsi
45
46 start-stop-daemon --start --quiet --pidfile $PIDFILE --exec $DAEMON
47 RETVAL=$?
48 starttargets
49}
50
51starttargets() {
52 echo "Setting up iSCSI targets"
53 $ADM -m node --loginall=automatic
54}
55
56stoptargets() {
57 echo "Disconnecting iSCSI targets"
58 sync
59 $ADM -m node --logoutall=all
60 RETVAL=$?
61 #if RETVAL is 21, means no active sessions, consider ok
62 if [ "$RETVAL" = "21" ]; then
63 RETVAL=0
64 fi
65}
66
67stop() {
68 stoptargets
69 if [ $RETVAL -ne 0 ]; then
70 echo "Failure:" "Could not stop all targets, try again later"
71 return $RETVAL
72 fi
73
74 echo "Stopping iSCSI initiator service"
75 start-stop-daemon --stop --quiet --pidfile $PIDFILE --exec $DAEMON
76 rm -f $PIDFILE
77 status=0
78 modprobe -r ib_iser 2>/dev/null
79 if [ "$?" -ne "0" -a "$?" -ne "1" ]; then
80 status=1
81 fi
82 modprobe -r iscsi_tcp 2>/dev/null
83 if [ "$?" -ne "0" -a "$?" -ne "1" ]; then
84 status=1
85 fi
86}
87
88restart() {
89 stop
90 if [ $RETVAL -ne 0 ]; then
91 echo "Failure:" "Stopping iSCSI initiator service failed, not starting"
92 return $RETVAL
93 fi
94 start
95}
96
97restarttargets() {
98 stoptargets
99 if [ $RETVAL -ne 0 ]; then
100 echo "Failure:" "Could not stop all targets, try again later"
101 return $RETVAL
102 fi
103 starttargets
104}
105
106status() {
107 #XXX FIXME: what to do here?
108 #status iscsid
109 # list active sessions
110 echo Current active iSCSI sessions:
111 $ADM -m session
112}
113
114case "$1" in
115 start|starttargets|stop|stoptargets|restart|restarttargets|status)
116 $1
117 ;;
118 *)
119 echo "Usage: $0 {start|stop|restart|status}"
120 exit 1
121 ;;
122esac
123exit $RETVAL
diff --git a/networking-layer/recipes-daemons/iscsi-initiator-utils/iscsi-initiator-utils_%.bbappend b/networking-layer/recipes-daemons/iscsi-initiator-utils/iscsi-initiator-utils_%.bbappend
new file mode 100644
index 0000000..81fe7b7
--- /dev/null
+++ b/networking-layer/recipes-daemons/iscsi-initiator-utils/iscsi-initiator-utils_%.bbappend
@@ -0,0 +1 @@
FILESEXTRAPATHS_prepend := "${THISDIR}/files:"