From: Brad Hubbard <bhubbard@redhat.com>
Date: Wed, 22 Feb 2023 05:40:12 +0000 (+1000)
Subject: task/selinux: Ignore source context of ping_t
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fheads%2Fwip-ignore-ping-selinux-denial-tracker-55443.2;p=teuthology.git

task/selinux: Ignore source context of ping_t

Fixes: https://tracker.ceph.com/issues/55443

Signed-off-by: Brad Hubbard <bhubbard@redhat.com>
---

diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py
index ca7390722..0d2a27514 100644
--- a/teuthology/task/selinux.py
+++ b/teuthology/task/selinux.py
@@ -137,6 +137,7 @@ class SELinux(Task):
             'comm="sssd"',
             'comm="sss_cache"',
             'context=system_u:system_r:NetworkManager_dispatcher_t:s0',
+            'scontext=system_u:system_r:ping_t:s0',
         ]
         se_allowlist = self.config.get('allowlist', [])
         if se_allowlist: