Back to bug 1400493

Who When What Removed Added
Soumya Koduri 2016-12-01 11:30:29 UTC Blocks 1399698
Depends On 1399698
Milos Malik 2016-12-01 12:37:41 UTC QA Contact qe-baseos-security mmalik
Soumya Koduri 2016-12-01 13:13:43 UTC Blocks 1400543
Rejy M Cyriac 2016-12-01 17:49:19 UTC CC rcyriac
Lukas Vrabec 2016-12-09 11:43:52 UTC Priority unspecified high
Rejy M Cyriac 2016-12-09 14:46:38 UTC Severity medium high
Soumya Koduri 2016-12-12 06:20:40 UTC Flags needinfo?(lvrabec)
Lukas Vrabec 2016-12-13 13:50:26 UTC Status NEW POST
Flags needinfo?(lvrabec)
Lukas Vrabec 2016-12-13 15:03:23 UTC Status POST MODIFIED
Fixed In Version selinux-policy-3.13.1-112.el7
Marcel Kolaja 2016-12-22 08:44:18 UTC Blocks 1408125
Marcel Kolaja 2016-12-22 08:45:12 UTC Keywords ZStream
Atin Mukherjee 2017-01-10 11:06:15 UTC Blocks 1399698
errata-xmlrpc 2017-01-12 12:49:15 UTC Status MODIFIED ON_QA
Lukas Vrabec 2017-01-13 12:53:52 UTC Doc Text Cause:
Reboot 2 nodes in the cluster so that pacemaker quorum will be lost and starts stopping the services in cluster on all the nodes.

Consequence:
Missing SELinux allow rules

Fix:
Added SELinux allow rule, that glusterd_t can stop glusterd_t domains

Result:
No AVCs seen when ganesha cluster nodes are rebooted.
Doc Type If docs needed, set a value Bug Fix
Mirek Jahoda 2017-01-13 15:08:56 UTC CC mjahoda
Docs Contact mjahoda
Doc Text Cause:
Reboot 2 nodes in the cluster so that pacemaker quorum will be lost and starts stopping the services in cluster on all the nodes.

Consequence:
Missing SELinux allow rules

Fix:
Added SELinux allow rule, that glusterd_t can stop glusterd_t domains

Result:
No AVCs seen when ganesha cluster nodes are rebooted.
Due to a missing SELinux rules, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occurs during an RHGS server restart.
Mirek Jahoda 2017-01-13 15:10:32 UTC Doc Text Due to a missing SELinux rules, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occurs during an RHGS server restart. Due to a missing SELinux rule, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occurs during an RHGS server restart.
Mirek Jahoda 2017-01-13 15:14:45 UTC Doc Text Due to a missing SELinux rule, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occurs during an RHGS server restart. Due to a missing SELinux rule, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occur during an RHGS server restart.
Mirek Jahoda 2017-01-18 08:34:39 UTC Doc Text Due to a missing SELinux rule, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the glusterd_t domain has been added and SELinux denials no longer occur during an RHGS server restart. Due to a missing SELinux rule, when two nodes of a Red Hat Gluster Storage (RHGS) server were restarted, the Pacemaker tool stopped services on all nodes. The rule for the "glusterd_t" domain has been added, and SELinux denials no longer occur during an RHGS server restart.
Milos Malik 2017-02-03 12:10:13 UTC Status ON_QA VERIFIED
errata-xmlrpc 2017-08-01 15:17:42 UTC Status VERIFIED CLOSED
Resolution --- ERRATA
Last Closed 2017-08-01 11:17:42 UTC

Back to bug 1400493