#246 resultsdb doesn't work in enforcing mode
Closed: Fixed Opened by kparal.

I get 5xx HTTP error when accessing https://taskotron-dev.fedoraproject.org/resultsdb/results and this is written into journal on resultsdb-dev01:

Jan 05 12:07:54 resultsdb-dev01.qa.fedoraproject.org audit[8844]: AVC avc:  denied  { name_connect } for  pid=8844 comm="httpd" dest=80 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1

After switching to permissive mode, everything works ok.


Metadata Update from @kparal:
- Issue assigned to kparal

The reason is that httpd_can_network_connect seboolean is not set on dev.

Fixed by https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=353a4867e5927d4aa2b3cfbfce153e25a068c019 and https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=dc771f332fc1d0c97ec540721c5b6229f2716c74 .

Metadata Update from @kparal:
- Issue close_status updated to: Fixed
- Issue status updated to: Closed (was: Open)

Metadata