From 646d4642038ca58d48af0d39e47174f08970a0f9 Mon Sep 17 00:00:00 2001 From: Peter Hunt Date: Tue, 5 Mar 2024 13:22:51 -0500 Subject: [PATCH] e2e_node: use kubelet_exec_t instead of bin_t for kubelet as bin_t isn't powerful enough, and we run into a wack-a-mole situation making bin_t powerful enough for the tests Signed-off-by: Peter Hunt --- test/e2e_node/remote/node_e2e.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/e2e_node/remote/node_e2e.go b/test/e2e_node/remote/node_e2e.go index e4d3739b7f3..25a9698b50b 100644 --- a/test/e2e_node/remote/node_e2e.go +++ b/test/e2e_node/remote/node_e2e.go @@ -130,7 +130,7 @@ func osSpecificActions(args, host, workspace string) (string, error) { // kubelet on Fedora CoreOS distribution func setKubeletSELinuxLabels(host, workspace string) error { cmd := getSSHCommand(" && ", - fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "kubelet")), + fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t kubelet_exec_t %s", filepath.Join(workspace, "kubelet")), fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "e2e_node.test")), fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "ginkgo")), fmt.Sprintf("/usr/bin/chcon -u system_u -r object_r -t bin_t %s", filepath.Join(workspace, "mounter")),