Skip to content

Commit

Permalink
teuthology/task/selinux: ignore denials in agetty
Browse files Browse the repository at this point in the history
This was tracked in [1], but the addition of the context to the
allowlist in ceph.git commit 7a6389272aff ("qa: ignore container
checkpoint/restore related selinux denials for centos9") doesn't
cover krbd suite which doesn't pull in any distro snippets.

Since this denial has nothing to do with Ceph [2], let's ignore it
globally.

[1] http://tracker.ceph.com/issues/64616
[2] https://bugzilla.redhat.com/show_bug.cgi?id=2259622

Signed-off-by: Ilya Dryomov <[email protected]>
  • Loading branch information
idryomov committed Jul 10, 2024
1 parent 454a461 commit 2edcefa
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions teuthology/task/selinux.py
Original file line number Diff line number Diff line change
Expand Up @@ -137,6 +137,7 @@ def get_denials(self):
'comm="sssd"',
'comm="sss_cache"',
'context=system_u:system_r:NetworkManager_dispatcher_t:s0',
'context=system_u:system_r:getty_t:s0',
]
se_allowlist = self.config.get('allowlist', [])
if se_allowlist:
Expand Down

0 comments on commit 2edcefa

Please sign in to comment.