URL: https://github.com/freeipa/freeipa/pull/693
Author: MartinBasti
Title: #693: [tests] collect audit.log for easier selinux investigation
Action: opened
PR body:
"""
Audit log contains useful information about selinux issues
"""
To pull the PR as Git branch:
git remote add ghfreeipa https://github.com/freeipa/freeipa
git fetch ghfreeipa pull/693/head:pr693
git checkout pr693
From 5da23c9f552ba9b36536a5821d7b5005dd05a5ea Mon Sep 17 00:00:00 2001
From: Martin Basti <mba...@redhat.com>
Date: Wed, 5 Apr 2017 15:11:09 +0200
Subject: [PATCH] [tests] collect audit.log for easier selinux investigation
Audit log contains useful information about selinux issues
---
ipaplatform/base/paths.py | 1 +
ipatests/pytest_plugins/integration/tasks.py | 3 +++
2 files changed, 4 insertions(+)
diff --git a/ipaplatform/base/paths.py b/ipaplatform/base/paths.py
index 9cf160f..070d3ff 100644
--- a/ipaplatform/base/paths.py
+++ b/ipaplatform/base/paths.py
@@ -295,6 +295,7 @@ class BasePathNamespace(object):
SSSD_MC_PASSWD = "/var/lib/sss/mc/passwd"
SSSD_PUBCONF_KNOWN_HOSTS = "/var/lib/sss/pubconf/known_hosts"
SSSD_PUBCONF_KRB5_INCLUDE_D_DIR = "/var/lib/sss/pubconf/krb5.include.d/"
+ VAR_LOG_AUDIT = "/var/log/audit/audit.log"
DIRSRV_LOCK_DIR = "/var/lock/dirsrv"
VAR_LOG_DIRSRV_INSTANCE_TEMPLATE = "/var/log/dirsrv/slapd-%s"
SLAPD_INSTANCE_ACCESS_LOG_TEMPLATE = "/var/log/dirsrv/slapd-%s/access"
diff --git a/ipatests/pytest_plugins/integration/tasks.py b/ipatests/pytest_plugins/integration/tasks.py
index 382028a..1705e25 100644
--- a/ipatests/pytest_plugins/integration/tasks.py
+++ b/ipatests/pytest_plugins/integration/tasks.py
@@ -84,6 +84,9 @@ def setup_server_logs_collecting(host):
# dogtag logs
host.collect_log(os.path.join(paths.VAR_LOG_PKI_DIR))
+ # selinux logs
+ host.collect_log(paths.VAR_LOG_AUDIT)
+
# SSSD debugging must be set after client is installed (function
# setup_sssd_debugging)
--
Manage your subscription for the Freeipa-devel mailing list:
https://www.redhat.com/mailman/listinfo/freeipa-devel
Contribute to FreeIPA: http://www.freeipa.org/page/Contribute/Code
