CMP-3537: Fix profile recording #125
Conversation
Add selinuxrecording.process to file_type attribute to fix container creation failure with "write to /proc/self/attr/keycreate: Invalid argument" on OpenShift 4.20 where CRI-O/crun 1.23+ strictly validates keycreate contexts. Signed-off-by: Vincent Shen <wenshen@redhat.com>
openshift-ci
bot
added
the
approved
|
/lgtm |
openshift-ci-robot
added
the
jira/valid-reference
|
@xiaojiey: This pull request references CMP-3537 which is a valid jira issue. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository. |
|
I did that during the test but did not add to the code, but this looks good in the code. |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: xiaojiey, yuumasato The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
4 participants
What type of PR is this?
/kind bug
What this PR does / why we need it:
Reload the SELinux policy is needed, otherwise you will still get the keycreate error.
This PR a test PR. It is based on #123.
Which issue(s) this PR fixes:
Does this PR have test?
Special notes for your reviewer:
Does this PR introduce a user-facing change?