]> git-server-git.apps.pok.os.sepia.ceph.com Git - teuthology.git/commit
projects / teuthology.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: c433f10) | patch
selinux: allowlist bpf podman denials wip-74553 2140/head
authorDavid Galloway <david.galloway@ibm.com>
Wed, 4 Feb 2026 14:29:48 +0000 (09:29 -0500)
committerDavid Galloway <david.galloway@ibm.com>
Wed, 4 Feb 2026 14:29:48 +0000 (09:29 -0500)
commit42506abdd1fc3794d8a539a1a84d77f329fc0030
treee98afcbf99d2b51678d54da30fb8db57588ef574tree | snapshot
parentc433f1062990a0488dc29a553589bc609a460691commit | diff
selinux: allowlist bpf podman denials

Rocky Linux 10 logs SELinux AVCs for systemd BPF operations during container startup due to incomplete SELinux policy coverage. These AVCs occur in permissive mode, are reproducible without Ceph, and do not indicate functional failure. Tests should ignore this specific AVC class while continuing to fail on enforced denials.

Signed-off-by: David Galloway <david.galloway@ibm.com>
teuthology/task/selinux.py diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.