From: Sage Weil Date: Tue, 3 May 2016 03:08:40 +0000 (-0400) Subject: task/selinux: another pcp whitelist X-Git-Tag: 1.1.0~620^2 X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=79f2f8c8fbf2ae312df13c55ff0903cc03b29c2e;p=teuthology.git task/selinux: another pcp whitelist SELinux denials found on ubuntu@smithi027.front.sepia.ceph.com: ['type=AVC msg=audit(1462234212.274:85266): avc: denied { read } for pid=1984 comm="pmcd" name="pmlogger_daily.pid" dev="tmpfs" ino=1474542 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:cron_var_run_t:s0 tclass=file'] Signed-off-by: Sage Weil --- diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py index bc1f58cb8..f540fea14 100644 --- a/teuthology/task/selinux.py +++ b/teuthology/task/selinux.py @@ -115,6 +115,7 @@ class SELinux(Task): 'name="cephtest"', 'scontext=system_u:system_r:nrpe_t:s0', 'scontext=system_u:system_r:pcp_pmlogger_t', + 'scontext=system_u:system_r:pcp_pmcd_t:s0', ] se_whitelist = self.config.get('whitelist', []) if se_whitelist: