From 77191c8b5a7288c8b8575a34c3f655e34cae5e62 Mon Sep 17 00:00:00 2001
From: "Dustin C. Hatch" <dustin@hatch.name>
Date: Mon, 19 Dec 2022 10:22:00 -0600
Subject: [PATCH] Fedora37: Set collectd SELinux domain permissive

*collectd* is broken by default on Fedora 36 and 36.  Several plugins
generate AVC denials.
---
 group_vars/Fedora37.yml | 4 ++++
 1 file changed, 4 insertions(+)
 create mode 100644 group_vars/Fedora37.yml

diff --git a/group_vars/Fedora37.yml b/group_vars/Fedora37.yml
new file mode 100644
index 0000000..0542fd7
--- /dev/null
+++ b/group_vars/Fedora37.yml
@@ -0,0 +1,4 @@
+# collectd generates a bunch of AVC denials on Fedora 37.  We'll mark
+# its domain permissive until the problems are identified and resolved
+# upstream.
+collectd_selinux_permissive: true