[ovs-build] Still Failing: openvswitch/ovs#5960 (master - ee1c729)

Travis CI builds at travis-ci.org
Sat Feb 24 02:48:06 UTC 2018


Build Update for openvswitch/ovs
-------------------------------------

Build: #5960
Status: Still Failing

Duration: 29 minutes and 47 seconds
Commit: ee1c729 (master)
Author: Aaron Conole
Message: selinux: allow dpdkvhostuserclient sockets with newer libvirt

Newer libvirt and openstack versions will now label the unix socket as
an `svirt_tmpfs_t` object.  This means that in order to support
deploying with the recommended configuration (using a
dpdkvhostuserclient socket), additional permissions need to be
installed as part of the selinux policy.

An example of some of the AVC violations:

    type=AVC msg=audit(1518752799.102:978): avc:  denied  { write }
    for  pid=14368 comm="ovs-vswitchd" name="vhost0" dev="dm-0" ino=94
    scontext=system_u:system_r:openvswitch_t:s0
    tcontext=system_u:object_r:svirt_tmp_t:s0 tclass=sock_file

    type=AVC msg=audit(1518816172.126:1318): avc:  denied  { connectto }
    for  pid=32717 comm="ovs-vswitchd" path="/tmp/vhost0"
    scontext=system_u:system_r:openvswitch_t:s0
    tcontext=system_u:system_r:svirt_t:s0:c106,c530
    tclass=unix_stream_socket

Signed-off-by: Aaron Conole <aconole at redhat.com>
Acked-by: Ansis Atteka <aatteka at ovn.org>

View the changeset: https://github.com/openvswitch/ovs/compare/eb84ccc3e861...ee1c7296ece6

View the full build log and details: https://travis-ci.org/openvswitch/ovs/builds/345526137?utm_source=email&utm_medium=notification

--

You can configure recipients for build notifications in your .travis.yml file. See https://docs.travis-ci.com/user/notifications

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.openvswitch.org/pipermail/ovs-build/attachments/20180224/446cd9bf/attachment-0001.html>


More information about the build mailing list