Bug 1010472

Summary: rhevm-log-collector hangs when running ausearch command from sos selinux plugin
Product: Red Hat Enterprise Virtualization Manager Reporter: Derrick Ornelas <dornelas>
Component: ovirt-engine-log-collectorAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED ERRATA QA Contact: sefi litmanovich <slitmano>
Severity: high Docs Contact:
Priority: high    
Version: 3.2.0CC: acathrow, ecohen, eedri, iheim, jamills, kcleveng, mkalinin, oschreib, pstehlik, Rhev-m-bugs, scohen, yeylon
Target Milestone: ---Keywords: Triaged, ZStream
Target Release: 3.3.0   
Hardware: All   
OS: Linux   
Whiteboard: integration
Fixed In Version: rhevm-log-collector-3.3.1-1.el6ev Doc Type: Bug Fix
Doc Text:
When rhevm-log-collector attempted to collect logs from Red Hat Enterprise Linux hosts, the process was suspended indefinitely while processing the SELinux sos plugin. This update adds a "-t" flag to the ssh command used in the log collector, which provides a controlling TTY to finish the rhevm-log-collector process after the host sosreport is collected.
Story Points: ---
Clone Of:
: 1022505 (view as bug list) Environment:
Last Closed: 2014-01-21 17:00:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1005202    
Bug Blocks: 1022505    

Description Derrick Ornelas 2013-09-20 20:38:03 UTC
Description of problem:  When rhevm-log-collector attempts to collect logs from RHEL hypervisor the process hangs indefinitely while processing the selinux sos plugin because of the following line:

        self.collectExtOutput("ausearch -m avc,user_avc -ts today")



Version-Release number of selected component (if applicable):

rhevm-log-collector-3.2.2-4.el6ev.noarch
sos-2.2-38.el6_4.2.noarch

How reproducible:

100%


Steps to Reproduce:
1.  Run 'rhevm-log-collector' on an environment containing a hypervisor running full RHEL 6



Actual results:

The rhevm-log-collector command never finishes, and sosreport runs indefinitely on the RHEL 6 hypervisor


Expected results:

The rhevm-log-collector command finishes after the host sosreport is collected 


Additional info:

The issue appears to be that the ausearch command requires a controlling TTY(pty), and hangs indefinitely without access to one.  The ssh command that rhevm-log-collector runs does have a controlling TTY.

Comment 1 Sandro Bonazzola 2013-09-23 06:26:46 UTC
There is an open bug about ausearch, however it seems that running it through ssh with -t flag is enough for providing the needed TTY.
I just need to check if adding that flag has other implications.

Comment 2 Sandro Bonazzola 2013-09-24 14:45:58 UTC
Patch pushed upstream master by James W. Mills.

Comment 3 Sandro Bonazzola 2013-09-25 13:12:27 UTC
Patch merged upstream master. Pushed and merged also on upstream 3.3 branch.

Comment 5 sefi litmanovich 2013-10-03 07:52:50 UTC
verified on RHEVM 3.3 IS17.
rhevm-log-collector-3.3.0-1.el6ev.noarch
sos-2.2-44.el6.noarch

Comment 7 errata-xmlrpc 2014-01-21 17:00:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-0039.html