- Add test to be sure selinux helper sets context when the user
  configures their own workhorse directory
- refactored selinux helper to not use the deprecated helper methods as
  discovered when the new test failed

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

- Run the SELinux helper after GitLab Workhorse and other files are
  created ensuring their file contexts are restored
- Place GitLab Workhorse socket files into a sockets directory allowing
  the SELinux file context to be inherited on service restarts
- Add a GitLab Workhorse helper to ensure that new UNIX sockets for
  Workhorse always inherit the proper SELinux file context

Signed-off-by: Robert Marshall <rmarshall@gitlab.com>

Ian Baum authored 4 years ago and Balasankar C committed 4 years ago

* Matching behavior in rails codebase
* This will be default behavior in 4.0

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>

CentOS 8 requires that pathnames be present when calling `restorecon`,
but this was not a requirement in CentOS 7. We fix this by moving all
SELinux-related changes to the gitlab::selinux recipe so that all the required
files and directories can be made before any SELinux changes are applied. This
makes sense from a code organization standpoint and also has the nice side
effect of removing the need to ignore unknown files (-i option in restorecon)
as well.

This commit is essentially commit 5b992246 by
Stan Hu, rebased against latest master

Signed-off-by: Balasankar "Balu" C <balasankar@gitlab.com>