From: Zack Cerza <zack@redhat.com>
Date: Wed, 16 Mar 2016 17:24:38 +0000 (-0600)
Subject: selinux: Whitelist nagios' nrpe
X-Git-Tag: 1.1.0~647^2
X-Git-Url: http://git.apps.os.sepia.ceph.com/?a=commitdiff_plain;h=636b33e72ff7aff27cd1ce3c9f1573d0b34cbc0c;p=teuthology.git

selinux: Whitelist nagios' nrpe

Signed-off-by: Zack Cerza <zack@redhat.com>
---

diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py
index 70aad5147c..5a51fca013 100644
--- a/teuthology/task/selinux.py
+++ b/teuthology/task/selinux.py
@@ -113,6 +113,7 @@ class SELinux(Task):
             'comm="dmidecode"',
             'chronyd.service',
             'name="cephtest"',
+            'scontext=system_u:system_r:nrpe_t:s0',
         ]
         se_whitelist = self.config.get('whitelist', [])
         if se_whitelist: