Bug 1017010

Summary: Unable to heal subscription with error [Errno 13] Permission denied: in rhsm.log
Product: Red Hat Enterprise Linux 7 Reporter: spandey
Component: subscription-managerAssignee: candlepin-bugs
Status: CLOSED DUPLICATE QA Contact: John Sefler <jsefler>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 7.0CC: ckozak, kbanerje, redakkan, skallesh, spandey
Target Milestone: rc   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-10-30 14:59:49 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 863175    

Description spandey 2013-10-09 07:04:15 UTC
Description of problem:


Version-Release number of selected component (if applicable):


Prerequisites:
Rhel7 with following subscription-manager rpm 
 subscription-manager-migration-data-2.0.4-1.git.0.6bebf6f.el7.noarch
subscription-manager-gui-1.10.3-1.git.1.4b7116f.el7.x86_64
subscription-manager-firstboot-1.10.3-1.git.1.4b7116f.el7.x86_64
subscription-manager-migration-1.10.3-1.git.1.4b7116f.el7.x86_64
subscription-manager-1.10.3-1.git.1.4b7116f.el7.x86_64

Steps to Repro : 
Register client to candlepin with product cert (100000000000002.pem)
set healing frequency for 1 min 

Expected result : 
After 1 min product should be in subscribed state .

Actual Result : 
healing is not getting completed with following message in rhsm.log file 

2013-10-09 23:20:59,873 [DEBUG] rhsmcertd-worker @connection.py:441 - Making request: GET /candlepin/consumers/da72931a-cf12-4240-8be0-a530343b1d59/certificates?serials=7516207693589626410
2013-10-09 23:20:59,928 [DEBUG] rhsmcertd-worker @connection.py:460 - Response status: 200
2013-10-09 23:20:59,932 [ERROR] rhsmcertd-worker @certlib.py:387 - [Errno 13] Permission denied: '/etc/pki/entitlement/7516207693589626410-key.pem'
Traceback (most recent call last):
  File "/usr/share/rhsm/subscription_manager/certlib.py", line 384, in install
    br.write(key, cert)
  File "/usr/share/rhsm/subscription_manager/certdirectory.py", line 308, in write
    key.write(key_path)
  File "/usr/lib64/python2.7/site-packages/rhsm/certificate.py", line 574, in write
    f = open(pem_path, 'w')
IOError: [Errno 13] Permission denied: '/etc/pki/entitlement/7516207693589626410-key.pem'
2013-10-09 23:20:59,934 [ERROR] rhsmcertd-worker @certlib.py:391 - Bundle not loaded:


error pastebin 

http://pastebin.test.redhat.com/169008

Comment 2 Carter Kozak 2013-10-30 14:59:49 UTC
Selinux is blocking us from writing to /etc/pki/entitlement and /etc/yum.repos.d/redhat.repo

There's an open bug to get that fixed.

*** This bug has been marked as a duplicate of bug 1000301 ***