Merge "use sova to check for selinux denials"

tasks/sova.yml

@@ -13,5 +13,6 @@
       "ironic-conductor": "/var/log/containers/ironic/ironic-conductor.log"
       syslog: "/var/log/journal.txt"
       logstash: "/var/log/extra/logstash.txt"
+      selinux: "/var/log/extra/denials.txt"
     result: "{{ ansible_user_dir }}/workspace/logs/failures_file"
     result_file_dir: "{{ ansible_user_dir }}/workspace/logs"

vars/sova-patterns.yml

@@ -775,3 +775,9 @@ patterns:
       msg: 'Introspection failed, cannot get IP address'
       tag: 'infra'
       pattern: 'socket.error: [Errno 99] Cannot assign requested address'
+  "selinux":
+    - id: 700
+      logstash: 'denied'
+      msg: 'selinux denials found'
+      tag: 'code'
+      pattern: 'denied'