Merge pull request #67 from mikedep333/kernel_keyring

Fix pulpcore-worker being unable to read the
pulp · Jun 30, 2023 · 379f43c · 379f43c
2 parents b0a4472 + 4ae36b8
commit 379f43c
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/pulpcore.te b/pulpcore.te
@@ -196,6 +196,8 @@ allow pulpcore_server_t httpd_config_t:dir read;
 
 # This allows API/Content to read the kernel keyring for the worker process.
 allow pulpcore_server_t pulpcore_t:key { read view };
+# And the inverse.
+allow pulpcore_t pulpcore_server_t:key { read view };
 
 optional_policy(`
         gpg_exec(pulpcore_t)