task/selinux: ignore SElinux denials caused by podman

it's a workaround of https://tracker.ceph.com/issues/43635

Signed-off-by: Kefu Chai <kchai@redhat.com>

diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py
index c3cd494f59db7ddfbef9730d39d33a8164fb5e97..01026f5e4494ea24c86f242a0baf2801b1ff9021 100644 (file)
--- a/teuthology/task/selinux.py
+++ b/teuthology/task/selinux.py
@@ -125,6 +125,7 @@ class SELinux(Task):
             'comm="rhsmcertd-worke"',
             'comm="setroubleshootd"',
             'comm="rpm"',
+            'tcontext=system_u:object_r:container_runtime_exec_t:s0',
         ]
         se_whitelist = self.config.get('whitelist', [])
         if se_whitelist: