From a96a0239cf36d2c51d18335ab1800bb73dc8e171 Mon Sep 17 00:00:00 2001
From: Jose Luis Franco Arza <jfrancoa@redhat.com>
Date: Fri, 27 Apr 2018 17:18:09 +0200
Subject: [PATCH] Add sudo into instack's semanage call.

When having a file with incorrect SELinux context
in /home/stac/.ssh a permission error is displayed
at the time of running semanage during Pike to
Queens undercloud upgrade.

Closes-Bug: #1767405
Change-Id: I994917e491d6f8b4141a3c332c79ed8e8ce8e64c
---
 instack_undercloud/undercloud.py | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/instack_undercloud/undercloud.py b/instack_undercloud/undercloud.py
index aad700661..a3bed159d 100644
--- a/instack_undercloud/undercloud.py
+++ b/instack_undercloud/undercloud.py
@@ -1662,7 +1662,7 @@ def _ensure_ssh_selinux_permission():
                         wrong_perm = True
                         break
                 if wrong_perm:
-                    cmd = ['semanage',
+                    cmd = ['sudo', 'semanage',
                            'fcontext', '-a', '-t', 'ssh_home_t',
                            "{}(/.*)?".format(ssh_path)]
                     _run_command(cmd)