task/selinux: Ignore source context of ping_t

Fixes: https://tracker.ceph.com/issues/55443 Signed-off-by: Brad Hubbard <bhubbard@redhat.com>
ceph · May 2, 2023 · 9446fdb · 9446fdb
1 parent 69caab8
commit 9446fdb
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/teuthology/task/selinux.py b/teuthology/task/selinux.py
@@ -137,6 +137,7 @@ def get_denials(self):
             'comm="sssd"',
             'comm="sss_cache"',
             'context=system_u:system_r:NetworkManager_dispatcher_t:s0',
+            'scontext=system_u:system_r:ping_t:s0',
         ]
         se_allowlist = self.config.get('allowlist', [])
         if se_allowlist: