This is an automated email from the ASF dual-hosted git repository. vishesh pushed a commit to branch update-selinux-docs in repository https://gitbox.apache.org/repos/asf/cloudstack-documentation.git
commit 01b464aef5e53bd61f20fe50bde8105fe2327624 Author: Vishesh <vishes...@gmail.com> AuthorDate: Thu Sep 26 13:22:03 2024 +0530 Adress comments --- source/developersguide/ansible.rst | 2 +- source/installguide/hypervisor/kvm.rst | 2 +- source/installguide/hypervisor/lxc.rst | 2 +- source/installguide/management-server/_database.rst | 2 +- source/quickinstallationguide/qig.rst | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/source/developersguide/ansible.rst b/source/developersguide/ansible.rst index 8b72c97..fd845bf 100644 --- a/source/developersguide/ansible.rst +++ b/source/developersguide/ansible.rst @@ -294,7 +294,7 @@ For the management server role we create a main.yml task like this: Save this as `/etc/ansible/roles/cloudstack-management/tasks/main.yml` -.. note:: In a production environment, selinux would be set to enforcing +.. note:: In a production environment, selinux should be set to enforcing and the necessary selinux policies would be created to allow the services to run. diff --git a/source/installguide/hypervisor/kvm.rst b/source/installguide/hypervisor/kvm.rst index 5e6e43a..a1abd66 100644 --- a/source/installguide/hypervisor/kvm.rst +++ b/source/installguide/hypervisor/kvm.rst @@ -529,7 +529,7 @@ ensure the Agent has all the required permissions. $ setenforce permissive -.. note:: In a production environment, selinux would be set to enforcing +.. note:: In a production environment, selinux should be set to enforcing and the necessary selinux policies would be created to allow the services to run. diff --git a/source/installguide/hypervisor/lxc.rst b/source/installguide/hypervisor/lxc.rst index 700371d..505d322 100644 --- a/source/installguide/hypervisor/lxc.rst +++ b/source/installguide/hypervisor/lxc.rst @@ -319,7 +319,7 @@ ensure the Agent has all the required permissions. $ setenforce permissive -.. note:: In a production environment, selinux would be set to enforcing +.. note:: In a production environment, selinux should be set to enforcing and the necessary selinux policies would be created to allow the services to run. diff --git a/source/installguide/management-server/_database.rst b/source/installguide/management-server/_database.rst index d2c82b7..fec3a38 100644 --- a/source/installguide/management-server/_database.rst +++ b/source/installguide/management-server/_database.rst @@ -166,7 +166,7 @@ MySQL. See :ref:`install-database-on-separate-node`. setenforce permissive -.. note:: In a production environment, selinux would be set to enforcing +.. note:: In a production environment, selinux should be set to enforcing and the necessary selinux policies would be created to allow the services to run. diff --git a/source/quickinstallationguide/qig.rst b/source/quickinstallationguide/qig.rst index d8904f5..f49621d 100644 --- a/source/quickinstallationguide/qig.rst +++ b/source/quickinstallationguide/qig.rst @@ -227,7 +227,7 @@ and ensure that it returns a FQDN response SELinux ^^^^^^^ -In an ideal environment, selinux would be set to enforcing and the necessary +In an ideal environment, selinux should be set to enforcing and the necessary selinux policies would be created to allow the services to run. For this guide, we will set selinux to permissive mode. This will allow us to install and configure the services without having to worry about selinux policies.