Bug 2038764 - There is avc.log when running ovn dpdk pvp performance case
Summary: There is avc.log when running ovn dpdk pvp performance case
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux Fast Datapath
Classification: Red Hat
Component: ovn2.13
Version: FDP 21.J
Hardware: Unspecified
OS: Unspecified
medium
unspecified
Target Milestone: ---
: ---
Assignee: OVN Team
QA Contact: Jianlin Shi
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-01-10 02:03 UTC by liting
Modified: 2023-07-13 07:25 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FD-1710 0 None None None 2022-01-10 02:07:50 UTC

Description liting 2022-01-10 02:03:33 UTC 
Description of problem:
There is avc.log when running ovn dpdk pvp performance case

Version-Release number of selected component (if applicable):
[root@dell-per730-52 ~]# uname -r
4.18.0-193.19.1.el8_2.x86_64
[root@dell-per730-52 ~]# rpm -qa|grep ovn
ovn2.13-central-20.12.0-191.el8fdp.x86_64
ovn2.13-20.12.0-191.el8fdp.x86_64
ovn2.13-host-20.12.0-191.el8fdp.x86_64
[root@dell-per730-52 ~]# rpm -qa|grep openvswitch
openvswitch-selinux-extra-policy-1.0-28.el8fdp.noarch
openvswitch2.13-2.13.0-139.el8fdp.x86_64
kernel-kernel-networking-openvswitch-perf-1.0-193.noarch


How reproducible:


Steps to Reproduce:
job link: https://beaker.engineering.redhat.com/jobs/6161980
1. Run ovn dpdk pvp performance case 


Actual results:
avc log:
https://beaker-archive.host.prod.eng.bos.redhat.com/beaker-logs/2022/01/61619/6161980/11241174/137517326/645388819/avc.log

type=AVC msg=audit(1641371281.694:1151): avc:  denied  { write } for  pid=673669 comm="ovs-appctl" name="ovn-controller.2328349.ctl" dev="tmpfs" ino=159705519 scontext=system_u:system_r:openvswitch_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file permissive=1

Expected results:
No avc.log

Additional info:
Note You need to log in before you can comment on or make changes to this bug.