From 064a6ca844683a599824c8a7dcf7e35291fab2c9 Mon Sep 17 00:00:00 2001 From: Vasu Kulkarni Date: Tue, 1 Dec 2015 17:23:44 -0500 Subject: [PATCH] Ignore few se denials in audit log parsing dmidecode issue https://bugzilla.redhat.com/show_bug.cgi?id=1289274 tracker for chronyd issue http://tracker.ceph.com/issues/14244 Signed-off-by: Vasu Kulkarni --- teuthology/task/selinux.py | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py index 5b1f66bdda..ee081c10cd 100644 --- a/teuthology/task/selinux.py +++ b/teuthology/task/selinux.py @@ -6,6 +6,7 @@ from cStringIO import StringIO from teuthology.exceptions import SELinuxError from teuthology.misc import get_archive_dir from teuthology.orchestra.cluster import Cluster +from teuthology.orchestra import run from teuthology.lockstatus import get_status from . import Task @@ -88,10 +89,15 @@ class SELinux(Task): Look for denials in the audit log """ all_denials = dict() + ignore_known_denials = '\'\(' + 'comm="dmidecode"' + # dmidecode issue https://bugzilla.redhat.com/show_bug.cgi?id=1289274 + ignore_known_denials = ignore_known_denials + '\|' + 'chronyd.service' + '\)\'' + # tracker for chronyd issue http://tracker.ceph.com/issues/14244 for remote in self.cluster.remotes.iterkeys(): proc = remote.run( args=['sudo', 'grep', 'avc: .*denied', - '/var/log/audit/audit.log'], + '/var/log/audit/audit.log', run.Raw('|'), 'grep', '-v', + run.Raw(ignore_known_denials)], stdout=StringIO(), check_status=False, ) -- 2.39.5