Issue #145: Configure gssproxy service to have GSS-Proxy use its own rcache location - gssproxy

gssproxy

#145 Configure gssproxy service to have GSS-Proxy use its own rcache location

Closed: Fixed Opened Apr 15, 2015 by dpal.

Ticket was cloned from Red Hat Bugzilla (product Red Hat Enterprise Linux 7): Bug 1194299

Description of problem:
Related to bug 1008777.
I was able to make GSS-Proxy create the HTTP_0 file in /var/lib/gssproxy/rcache
by creating /etc/systemd/system/gssproxy.service with the following content
.include /usr/lib/systemd/system/gssproxy.service
[Service]
Environment=KRB5RCACHEDIR=/var/lib/gssproxy/rcache
I guess we might want to put this to standard gssproxy package.
Version-Release number of selected component (if applicable):
gssproxy-0.3.0-10.el7.x86_64
How reproducible:
Deterministic.
Steps to Reproduce:
1. Configure Apache with GSS-Proxy per
https://fedorahosted.org/gss-proxy/wiki/Apache
2. Do not change the gssproxy.service file nor create override in /etc
3. Access the web.
Actual results:
AVC denial as in bug 1008777.
Expected results:
No AVC denial, /var/lib/gssproxy/rcache/HTTP_0 created.
Additional info:
We likely also need to package /var/lib/gssproxy/rcache to the gssproxy rpm, so
that it is created.