Project

General

Profile

Bug #15987

"SELinux denials" in rados-wip-yuri-testing2-distro-basic-smithi run

Added by Yuri Weinstein about 3 years ago. Updated about 3 years ago.

Status:
Resolved
Priority:
Urgent
Assignee:
Category:
-
Target version:
-
Start date:
05/22/2016
Due date:
% Done:

0%

Source:
Q/A
Tags:
Backport:
jewel
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
rados
Pull request ID:

Description

Run: http://pulpito.ceph.com/yuriw-2016-05-21_14:21:49-rados-wip-yuri-testing2-distro-basic-smithi/
Jobs:['205594', '205604', '205613', '205618', '205643', '205673', '205679', '205699', '205708', '205717', '205727', '205768', '205821', '205829', '205837', '205842', '205844', '205865', '205876', '205883']
Logs: http://qa-proxy.ceph.com/teuthology/yuriw-2016-05-21_14:21:49-rados-wip-yuri-testing2-distro-basic-smithi/205594/teuthology.log

2016-05-21T14:45:52.950 INFO:teuthology.orchestra.run.smithi016:Running: 'sudo grep \'avc: .*denied\' /var/log/audit/audit.log | grep -v \'\\(comm="dmidecode"\\|chronyd.service\\|name="cephtest"\\|scontext=system_u:system_r:nrpe_t:s0\\|scontext=system_u:system_r:pcp_pmlogger_t\\|scontext=system_u:system_r:pcp_pmcd_t:s0\\)\''
2016-05-21T14:45:53.040 ERROR:teuthology.run_tasks:Manager failed: selinux
Traceback (most recent call last):
  File "/home/teuthworker/src/teuthology_master/teuthology/run_tasks.py", line 139, in run_tasks
    suppress = manager.__exit__(*exc_info)
  File "/home/teuthworker/src/teuthology_master/teuthology/task/__init__.py", line 134, in __exit__
    self.teardown()
  File "/home/teuthworker/src/teuthology_master/teuthology/task/selinux.py", line 144, in teardown
    self.get_new_denials()
  File "/home/teuthworker/src/teuthology_master/teuthology/task/selinux.py", line 192, in get_new_denials
    denials=new_denials[remote.name])
SELinuxError: SELinux denials found on ubuntu@smithi009.front.sepia.ceph.com: ['type=AVC msg=audit(1463866648.103:97562): avc:  denied  { create } for  pid=23978 comm="ceph-mds" name="ceph-mds.smithi009.asok" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file', 'type=AVC msg=audit(1463866648.103:97563): avc:  denied  { unlink } for  pid=23978 comm="ceph-mds" name="ceph-mds.smithi009.asok" dev="tmpfs" ino=1831596 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file']

Related issues

Copied to Ceph - Backport #16008: jewel: "SELinux denials" in rados-wip-yuri-testing2-distro-basic-smithi run Resolved

History

#1 Updated by Vasu Kulkarni about 3 years ago

  • Assignee set to Boris Ranto

#2 Updated by Boris Ranto about 3 years ago

  • Status changed from New to Pending Backport

Merged to master (PR#9218) and pending jewel backport (PR#8938).

#3 Updated by Nathan Cutler about 3 years ago

  • Backport set to jewel

#4 Updated by Nathan Cutler about 3 years ago

  • Copied to Backport #16008: jewel: "SELinux denials" in rados-wip-yuri-testing2-distro-basic-smithi run added

#5 Updated by Loic Dachary about 3 years ago

  • Status changed from Pending Backport to Resolved

Also available in: Atom PDF