URL:
https://github.com/freeipa/freeipa/pull/1897
Author: Tiboris
Title: #1897: Use temporary pid file for chronyd -q task
Action: opened
PR body:
"""
chrony is causing an SELinux denial because of chronyd
was not spawned using systemd and the command creates
a pidfile for unconfined proccess in /var/run with SELinux label:
`unconfined_u:object_r:var_run_t:s0`
Following chronyd daemon enablement with systemd will fail
due to mismatched SELinux labels on chronyd pidfile.
chronyd pidfile should be labeled with the following label:
`system_u:object_r:chronyd_var_run_t:s0`
This also changes bindcmdaddress to not touch /var/run/chrony.
"""
To pull the PR as Git branch:
git remote add ghfreeipa
https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/1897/head:pr1897
git checkout pr1897