]> git-server-git.apps.pok.os.sepia.ceph.com Git - ceph-ci.git/commit
projects / ceph-ci.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 7f2fdcf) | patch
qa: allowlist bpf podman denials on Rocky 10
authorDavid Galloway <david.galloway@ibm.com>
Mon, 26 Jan 2026 17:05:01 +0000 (12:05 -0500)
committerDavid Galloway <david.galloway@ibm.com>
Mon, 26 Jan 2026 17:51:04 +0000 (12:51 -0500)
commit854b223d5e0749bf4a4144a4b8df29fb95e84d44
treea314f8bdb93ec5407bebf300d36a202976636f69tree | snapshot
parent7f2fdcf9ada173165e852daae5c39da5989bddd1commit | diff
qa: allowlist bpf podman denials on Rocky 10

Rocky Linux 10 logs SELinux AVCs for systemd BPF operations during container startup due to incomplete SELinux policy coverage. These AVCs occur in permissive mode, are reproducible without Ceph, and do not indicate functional failure. Tests should ignore this specific AVC class while continuing to fail on enforced denials.

Signed-off-by: David Galloway <david.galloway@ibm.com>
(cherry picked from commit 93718d5f9a544471f73be974e30de00ac58c746f)
qa/distros/podman/rocky_10.yaml [new file with mode: 0644] blob
Unnamed repository; edit this file 'description' to name the repository.