From 17d820aaa85fabad21123ffa9fe4369092845f8b Mon Sep 17 00:00:00 2001
From: Takashi Kajinami <tkajinam@redhat.com>
Date: Sat, 12 Feb 2022 22:07:27 +0900
Subject: [PATCH] CentOS 9: Enable os_neutron_dac_override

... because the flag is still required in CentOS 9, so that neutron
can launch dnsmasq using privsep-helper.

Change-Id: I2db051ce181ad2fe6712f2cb4bbae1061de95af5
---
 manifests/neutron.pp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/manifests/neutron.pp b/manifests/neutron.pp
index a2dc756a8..160dea70b 100644
--- a/manifests/neutron.pp
+++ b/manifests/neutron.pp
@@ -41,7 +41,7 @@ class openstack_integration::neutron (
     Exec['update-ca-certificates'] ~> Service<| tag == 'neutron-service' |>
   }
 
-  if ($::operatingsystem == 'CentOS') and (versioncmp($::operatingsystemmajrelease, '8') == 0) {
+  if ($::operatingsystem == 'CentOS') and (versioncmp($::operatingsystemmajrelease, '8') >= 0) {
     # os_neutron_dac_override should be on to start privsep-helper
     # See https://bugzilla.redhat.com/show_bug.cgi?id=1850973
     selboolean { 'os_neutron_dac_override':