From: Kefu Chai <kchai@redhat.com>
Date: Thu, 16 Jan 2020 06:54:46 +0000 (+0800)
Subject: task/selinux: ignore SElinux denials caused by podman
X-Git-Tag: 1.1.0~167^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=refs%2Fpull%2F1396%2Fhead;p=teuthology.git

task/selinux: ignore SElinux denials caused by podman

it's a workaround of https://tracker.ceph.com/issues/43635

Signed-off-by: Kefu Chai <kchai@redhat.com>
---

diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py
index c3cd494f..01026f5e 100644
--- a/teuthology/task/selinux.py
+++ b/teuthology/task/selinux.py
@@ -125,6 +125,7 @@ class SELinux(Task):
             'comm="rhsmcertd-worke"',
             'comm="setroubleshootd"',
             'comm="rpm"',
+            'tcontext=system_u:object_r:container_runtime_exec_t:s0',
         ]
         se_whitelist = self.config.get('whitelist', [])
         if se_whitelist: