From 40edc5d5a53da8b632be421f485c3f0bd6eeb654 Mon Sep 17 00:00:00 2001
From: Alex Schultz <aschultz@redhat.com>
Date: Thu, 8 Dec 2016 10:46:50 -0700
Subject: [PATCH] Pin older openstack-selinux

The newer version of openstack-selinux-0.7.12-1.el7 has broken running
keystone under apache. Pin to an older version until BZ#1402926 can be
resolved.

Change-Id: I0c17dec53bc7e3b97dd3232c579221b8a1418e51
---
 manifests/init.pp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/manifests/init.pp b/manifests/init.pp
index bcff66779..94889d104 100644
--- a/manifests/init.pp
+++ b/manifests/init.pp
@@ -4,7 +4,8 @@ class openstack_integration {
 
   if $::osfamily == 'RedHat' {
     package { 'openstack-selinux':
-        ensure => 'latest'
+      # TODO(aschultz): remove this when openstack-selinux is updated BZ#1402926
+      ensure => '0.7.4-2.el7'
     }
     # Some packages provided by RDO are virtual
     # allow_virtual is false in Puppet 3 and will be true