gian/ceph-mirror
1
0
Fork 0
mirror of https://github.com/ceph/ceph synced 2026-08-02 07:03:18 +00:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

qa: allowlist bpf podman denials on Rocky 10

Browse Source 
Rocky Linux 10 logs SELinux AVCs for systemd BPF operations during container startup due to incomplete SELinux policy coverage. These AVCs occur in permissive mode, are reproducible without Ceph, and do not indicate functional failure. Tests should ignore this specific AVC class while continuing to fail on enforced denials.

Signed-off-by: David Galloway <david.galloway@ibm.com>
This commit is contained in:
David Galloway 2026-01-26 12:05:01 -05:00 committed by Casey Bodley
parent 0cef3dfa2a
commit 25411d57c6
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
qa/distros/all/rocky_10.yaml
View File

@ -1,2 +1,6 @@
os_type: rocky
os_version: "10.1"
overrides:
selinux:
allowlist:
- 'comm="systemd".*denied.*\{ prog_run \}.*tclass=bpf.*permissive=1'