Bug 1134464
| Summary: | ami-960fd6fe 6.6 i386 access us-east-1 | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Cloud Image Validation | Reporter: | Martin Minar <mminar> | ||||
| Component: | images | Assignee: | mkovacik | ||||
| Status: | CLOSED NOTABUG | QA Contact: | mkovacik | ||||
| Severity: | unspecified | Docs Contact: | |||||
| Priority: | unspecified | ||||||
| Version: | RHEL6.6 | CC: | mkoci | ||||
| Target Milestone: | --- | Keywords: | TestOnly | ||||
| Target Release: | --- | ||||||
| Hardware: | i386 | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2014-11-28 13:28:40 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
|
Description
Martin Minar
2014-08-27 14:32:27 UTC
Created attachment 931518 [details]
ami-960fd6fe-log.yaml
# m1.small: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
result: failed
actual repos:
{'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhel-source': False,
'rhui-REGION-rhel-server-releases-beta': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-client-config-server-6-beta': True}
expected repos: {'rhui-REGION-rhel-server-supplementary': False,
'rhui-REGION-rhel-server-rhscl': True,
'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
'rhui-REGION-rhel-server-source-supplementary': False,
'rhui-REGION-rhel-server-debug-supplementary': False,
'rhui-REGION-rhel-server-debug-rhscl': False,
'rhui-REGION-client-config-server-6-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-rhel-server-releases-source': False,
'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
True, 'rhui-REGION-rhel-server-releases-optional-source': False,
'rhui-REGION-client-config-server-6': True,
'rhui-REGION-rhel-server-releases': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_29_swap_file: passed
stage1:testcase_30_rhn_certificates: failed
-
command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
result: passed
value: package rh-amazon-rhui-client is not installed
/etc/init.d/choose_beta_repo /etc/init.d/rh-cloud-firstboot
/etc/pki/rhui/ca.crt /etc/pki/rhui/cdn.redhat.com-chain.crt
/etc/pki/rhui/content-rhel6-beta.key
/etc/pki/rhui/product/content-rhel6-beta.crt
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
/etc/pki/rhui/rhui-client-config-server-6-beta.key
/etc/yum.repos.d/redhat-rhui-beta.repo
/etc/yum.repos.d/redhat-rhui-client-config-beta.repo
/etc/yum.repos.d/rhui-load-balancers.conf
/etc/yum/pluginconf.d/amazon-id.conf
/etc/yum/pluginconf.d/rhui-lb.conf
/usr/lib/yum-plugins/amazon-id.py
/usr/lib/yum-plugins/amazon-id.pyc
/usr/lib/yum-plugins/amazon-id.pyo /usr/lib/yum-plugins/rhui-lb.py
/usr/lib/yum-plugins/rhui-lb.pyc /usr/lib/yum-plugins/rhui-lb.pyo
/usr/sbin/choose_repo.py /usr/sbin/rh-cloud-firstboot.py
-
command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
result: passed
value: notBefore=Aug 23 19:46:02 2011 GMT notAfter=Nov 30 19:46:02
2017 GMT
-
result: failed
comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
-noout -dates
result: passed
value: notBefore=Mar 18 11:24:54 2010 GMT notAfter=Mar 13 11:24:54
2030 GMT
-
result: passed
comment:
(/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
11:24:54; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
result: passed
value: notBefore=Mar 29 18:34:17 2012 GMT notAfter=Nov 30 18:34:17
2020 GMT
-
result: passed
comment:
(/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
18:34:17; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
-dates
result: passed
value: notBefore=Mar 29 18:38:42 2012 GMT notAfter=Nov 30 18:38:42
2020 GMT
-
result: passed
comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: failed
-
command: yum --disablerepo='*' -v repolist
result: passed
expectation: Not loading "subscription-manager" plugin
-
command: yum --enableplugin=subscription-manager --disablerepo='*'
-v repolist
result: passed
expectation: Loading "subscription-manager" plugin
-
command: subscription-manager list
result: failed
actual: subscription-manager list Config time: 1.314 Yum Version:
3.2.29 mirrorlist: https://rhui2-cds01.us-east-1.aws.ce.redhat.com/
pulp/mirror/content/beta/rhel/rhui/server/6/6Server/i386/optional/so
urce/SRPMS mirrorlist: https://rhui2-cds01.us-east-1.aws.ce.redhat.
com/pulp/mirror/content/beta/rhel/rhui/server/6/6Server/i386/os
mirrorlist: https://rhui2-cds01.us-east-1.aws.ce.redhat.com/pulp/mir
ror/content/beta/rhel/rhui/server/6/6Server/i386/source/SRPMS
mirrorlist: https://rhui2-cds01.us-east-1.aws.ce.redhat.com/pulp/mir
ror/content/beta/rhel/rhui/server/6/6Server/i386/optional/os
mirrorlist: https://rhui2-cds01.us-east-1.aws.ce.redhat.com/pulp/mir
ror/rhui-client-config/beta/rhel/server/6/i386/os Setting up
Package Sacks repolist: 0 [root@ip-10-141-192-201 ~]#
subscription-manager list Unable to verify server's identity:
[root@ip-10-141-192-201 ~]#
expectation: Installed Product Status
stage1:testcase_32_ephemeral: failed
-
command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
result: passed
value: 1
-
command: fdisk -l /dev/xvdj | grep '^Disk'
result: failed
actual: 1
-
command: grep '/dev/xvdj ' /proc/mounts | wc -l
result: passed
value: 0
-
command: mkfs.vfat -I /dev/xvdj
result: failed
actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127204.594:6): avc:
denied { setattr } for pid=1028 comm="prelink" name="" dev=pipefs
ino=11545 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127207.296:7): avc:
denied { setattr } for pid=1057 comm="prelink" name="" dev=pipefs
ino=11684 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127220.256:11): avc:
denied { setattr } for pid=1092 comm="prelink" name="" dev=pipefs
ino=11951 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127262.953:51): avc:
denied { setattr } for pid=1209 comm="prelink" name="" dev=pipefs
ino=12854 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127273.831:119):
avc: denied { read write } for pid=1393 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262354
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127274.221:120):
avc: denied { read write } for pid=1402 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127274.616:123):
avc: denied { setattr } for pid=1414 comm="prelink" name=""
dev=pipefs ino=13754
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127275.560:129):
avc: denied { setattr } for pid=1445 comm="prelink" name=""
dev=pipefs ino=13902
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-141-192-201 ~]#
expectation: START END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127204.594:6): avc:
denied { setattr } for pid=1028 comm="prelink" name="" dev=pipefs
ino=11545 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127207.296:7): avc:
denied { setattr } for pid=1057 comm="prelink" name="" dev=pipefs
ino=11684 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127220.256:11): avc:
denied { setattr } for pid=1092 comm="prelink" name="" dev=pipefs
ino=11951 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127262.953:51): avc:
denied { setattr } for pid=1209 comm="prelink" name="" dev=pipefs
ino=12854 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127273.831:119):
avc: denied { read write } for pid=1393 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262354
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127274.221:120):
avc: denied { read write } for pid=1402 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127274.616:123):
avc: denied { setattr } for pid=1414 comm="prelink" name=""
dev=pipefs ino=13754
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127275.560:129):
avc: denied { setattr } for pid=1445 comm="prelink" name=""
dev=pipefs ino=13902
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129942.907:6): avc:
denied { setattr } for pid=1034 comm="prelink" name="" dev=pipefs
ino=11777 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129945.498:7): avc:
denied { setattr } for pid=1062 comm="prelink" name="" dev=pipefs
ino=11911 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129951.647:8): avc:
denied { setattr } for pid=1132 comm="prelink" name="" dev=pipefs
ino=12265 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129957.755:27): avc:
denied { read write } for pid=1279 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262354
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129957.957:28): avc:
denied { read write } for pid=1286 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129958.112:29): avc:
denied { setattr } for pid=1291 comm="prelink" name="" dev=pipefs
ino=12797 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409129959.293:35): avc:
denied { setattr } for pid=1314 comm="prelink" name="" dev=pipefs
ino=12942 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-141-192-201 ~]#
expectation: START END
# c1.medium: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
result: failed
actual repos:
{'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhel-source': False,
'rhui-REGION-rhel-server-releases-beta': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-client-config-server-6-beta': True}
expected repos: {'rhui-REGION-rhel-server-supplementary': False,
'rhui-REGION-rhel-server-rhscl': True,
'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
'rhui-REGION-rhel-server-source-supplementary': False,
'rhui-REGION-rhel-server-debug-supplementary': False,
'rhui-REGION-rhel-server-debug-rhscl': False,
'rhui-REGION-client-config-server-6-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-rhel-server-releases-source': False,
'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
True, 'rhui-REGION-rhel-server-releases-optional-source': False,
'rhui-REGION-client-config-server-6': True,
'rhui-REGION-rhel-server-releases': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_29_swap_file: passed
stage1:testcase_30_rhn_certificates: failed
-
command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
result: passed
value: package rh-amazon-rhui-client is not installed
/etc/init.d/choose_beta_repo /etc/init.d/rh-cloud-firstboot
/etc/pki/rhui/ca.crt /etc/pki/rhui/cdn.redhat.com-chain.crt
/etc/pki/rhui/content-rhel6-beta.key
/etc/pki/rhui/product/content-rhel6-beta.crt
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
/etc/pki/rhui/rhui-client-config-server-6-beta.key
/etc/yum.repos.d/redhat-rhui-beta.repo
/etc/yum.repos.d/redhat-rhui-client-config-beta.repo
/etc/yum.repos.d/rhui-load-balancers.conf
/etc/yum/pluginconf.d/amazon-id.conf
/etc/yum/pluginconf.d/rhui-lb.conf
/usr/lib/yum-plugins/amazon-id.py
/usr/lib/yum-plugins/amazon-id.pyc
/usr/lib/yum-plugins/amazon-id.pyo /usr/lib/yum-plugins/rhui-lb.py
/usr/lib/yum-plugins/rhui-lb.pyc /usr/lib/yum-plugins/rhui-lb.pyo
/usr/sbin/choose_repo.py /usr/sbin/rh-cloud-firstboot.py
-
command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
result: passed
value: notBefore=Aug 23 19:46:02 2011 GMT notAfter=Nov 30 19:46:02
2017 GMT
-
result: failed
comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
-noout -dates
result: passed
value: notBefore=Mar 18 11:24:54 2010 GMT notAfter=Mar 13 11:24:54
2030 GMT
-
result: passed
comment:
(/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
11:24:54; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
result: passed
value: notBefore=Mar 29 18:34:17 2012 GMT notAfter=Nov 30 18:34:17
2020 GMT
-
result: passed
comment:
(/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
18:34:17; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
-dates
result: passed
value: notBefore=Mar 29 18:38:42 2012 GMT notAfter=Nov 30 18:38:42
2020 GMT
-
result: passed
comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
result: passed
value: 1
-
command: fdisk -l /dev/xvdj | grep '^Disk'
result: failed
actual: 1
-
command: grep '/dev/xvdj ' /proc/mounts | wc -l
result: passed
value: 0
-
command: mkfs.vfat -I /dev/xvdj
result: failed
actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127182.274:6): avc:
denied { setattr } for pid=1066 comm="prelink" name="" dev=pipefs
ino=11735 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127183.827:7): avc:
denied { setattr } for pid=1095 comm="prelink" name="" dev=pipefs
ino=11874 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127196.418:11): avc:
denied { setattr } for pid=1130 comm="prelink" name="" dev=pipefs
ino=12141 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127228.964:85): avc:
denied { setattr } for pid=1301 comm="prelink" name="" dev=pipefs
ino=13295 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127231.861:104):
avc: denied { read write } for pid=1432 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262359
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127231.899:109):
avc: denied { read write } for pid=1436 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127232.072:110):
avc: denied { setattr } for pid=1447 comm="prelink" name=""
dev=pipefs ino=13860
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127232.394:115):
avc: denied { setattr } for pid=1464 comm="prelink" name=""
dev=pipefs ino=13991
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-73-91-230 ~]#
expectation: START END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127182.274:6): avc:
denied { setattr } for pid=1066 comm="prelink" name="" dev=pipefs
ino=11735 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127183.827:7): avc:
denied { setattr } for pid=1095 comm="prelink" name="" dev=pipefs
ino=11874 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127196.418:11): avc:
denied { setattr } for pid=1130 comm="prelink" name="" dev=pipefs
ino=12141 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127228.964:85): avc:
denied { setattr } for pid=1301 comm="prelink" name="" dev=pipefs
ino=13295 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127231.861:104):
avc: denied { read write } for pid=1432 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262359
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127231.899:109):
avc: denied { read write } for pid=1436 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127232.072:110):
avc: denied { setattr } for pid=1447 comm="prelink" name=""
dev=pipefs ino=13860
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127232.394:115):
avc: denied { setattr } for pid=1464 comm="prelink" name=""
dev=pipefs ino=13991
scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128846.901:6): avc:
denied { setattr } for pid=1069 comm="prelink" name="" dev=pipefs
ino=11954 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128848.229:7): avc:
denied { setattr } for pid=1097 comm="prelink" name="" dev=pipefs
ino=12088 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128851.703:8): avc:
denied { setattr } for pid=1167 comm="prelink" name="" dev=pipefs
ino=12441 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128854.134:27): avc:
denied { read write } for pid=1282 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262358
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128854.174:28): avc:
denied { read write } for pid=1286 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262356
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128854.441:29): avc:
denied { setattr } for pid=1324 comm="prelink" name="" dev=pipefs
ino=12984 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128854.803:30): avc:
denied { setattr } for pid=1338 comm="prelink" name="" dev=pipefs
ino=13079 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-73-91-230 ~]#
expectation: START END
# t1.micro: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: failed
-
command: df -h | grep 15G
result: failed
actual: 1
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
result: failed
actual repos:
{'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhel-source': False,
'rhui-REGION-rhel-server-releases-beta': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-client-config-server-6-beta': True}
expected repos: {'rhui-REGION-rhel-server-supplementary': False,
'rhui-REGION-rhel-server-rhscl': True,
'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
'rhui-REGION-rhel-server-source-supplementary': False,
'rhui-REGION-rhel-server-debug-supplementary': False,
'rhui-REGION-rhel-server-debug-rhscl': False,
'rhui-REGION-client-config-server-6-beta': True,
'rhui-REGION-rhel-server-releases-source-beta': False,
'rhui-REGION-rhel-server-releases-source': False,
'rhui-REGION-rhel-server-releases-optional-source-beta': False,
'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
True, 'rhui-REGION-rhel-server-releases-optional-source': False,
'rhui-REGION-client-config-server-6': True,
'rhui-REGION-rhel-server-releases': True,
'rhui-REGION-rhel-server-releases-optional-beta': True,
'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
result: passed
value: package rh-amazon-rhui-client is not installed
/etc/init.d/choose_beta_repo /etc/init.d/rh-cloud-firstboot
/etc/pki/rhui/ca.crt /etc/pki/rhui/cdn.redhat.com-chain.crt
/etc/pki/rhui/content-rhel6-beta.key
/etc/pki/rhui/product/content-rhel6-beta.crt
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
/etc/pki/rhui/rhui-client-config-server-6-beta.key
/etc/yum.repos.d/redhat-rhui-beta.repo
/etc/yum.repos.d/redhat-rhui-client-config-beta.repo
/etc/yum.repos.d/rhui-load-balancers.conf
/etc/yum/pluginconf.d/amazon-id.conf
/etc/yum/pluginconf.d/rhui-lb.conf
/usr/lib/yum-plugins/amazon-id.py
/usr/lib/yum-plugins/amazon-id.pyc
/usr/lib/yum-plugins/amazon-id.pyo /usr/lib/yum-plugins/rhui-lb.py
/usr/lib/yum-plugins/rhui-lb.pyc /usr/lib/yum-plugins/rhui-lb.pyo
/usr/sbin/choose_repo.py /usr/sbin/rh-cloud-firstboot.py
-
command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
result: passed
value: notBefore=Aug 23 19:46:02 2011 GMT notAfter=Nov 30 19:46:02
2017 GMT
-
result: failed
comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
-noout -dates
result: passed
value: notBefore=Mar 18 11:24:54 2010 GMT notAfter=Mar 13 11:24:54
2030 GMT
-
result: passed
comment:
(/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
11:24:54; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
result: passed
value: notBefore=Mar 29 18:34:17 2012 GMT notAfter=Nov 30 18:34:17
2020 GMT
-
result: passed
comment:
(/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
18:34:17; expecting: 2020-11-10 00:00:00
-
command: openssl x509 -in
/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
-dates
result: passed
value: notBefore=Mar 29 18:38:42 2012 GMT notAfter=Nov 30 18:38:42
2020 GMT
-
result: passed
comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: passed
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127178.605:6): avc:
denied { setattr } for pid=1006 comm="prelink" name="" dev=pipefs
ino=11392 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127179.813:7): avc:
denied { setattr } for pid=1033 comm="prelink" name="" dev=pipefs
ino=11520 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127185.080:11): avc:
denied { setattr } for pid=1066 comm="prelink" name="" dev=pipefs
ino=11772 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127212.629:35): avc:
denied { setattr } for pid=1173 comm="prelink" name="" dev=pipefs
ino=12350 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.702:47): avc:
denied { read write } for pid=1306 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262357
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.712:48): avc:
denied { read write } for pid=1307 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262355
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.971:54): avc:
denied { setattr } for pid=1315 comm="prelink" name="" dev=pipefs
ino=12865 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127216.760:63): avc:
denied { setattr } for pid=1330 comm="prelink" name="" dev=pipefs
ino=13003 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-9-187-212 ~]#
expectation: START END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END
result: failed
actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
/var/log/audit/audit.log | grep -v userdata; echo END START
/var/log/audit/audit.log:type=AVC msg=audit(1409127178.605:6): avc:
denied { setattr } for pid=1006 comm="prelink" name="" dev=pipefs
ino=11392 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127179.813:7): avc:
denied { setattr } for pid=1033 comm="prelink" name="" dev=pipefs
ino=11520 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127185.080:11): avc:
denied { setattr } for pid=1066 comm="prelink" name="" dev=pipefs
ino=11772 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127212.629:35): avc:
denied { setattr } for pid=1173 comm="prelink" name="" dev=pipefs
ino=12350 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.702:47): avc:
denied { read write } for pid=1306 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262357
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.712:48): avc:
denied { read write } for pid=1307 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262355
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127215.971:54): avc:
denied { setattr } for pid=1315 comm="prelink" name="" dev=pipefs
ino=12865 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409127216.760:63): avc:
denied { setattr } for pid=1330 comm="prelink" name="" dev=pipefs
ino=13003 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128801.177:6): avc:
denied { setattr } for pid=1003 comm="prelink" name="" dev=pipefs
ino=11378 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128802.428:7): avc:
denied { setattr } for pid=1030 comm="prelink" name="" dev=pipefs
ino=11506 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128805.443:8): avc:
denied { setattr } for pid=1099 comm="prelink" name="" dev=pipefs
ino=11849 scontext=system_u:system_r:prelink_t:s0
tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128808.462:27): avc:
denied { read write } for pid=1240 comm="prelink"
path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262355
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128808.466:28): avc:
denied { read write } for pid=1241 comm="prelink"
path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262353
scontext=system_u:system_r:prelink_mask_t:s0
tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128808.651:29): avc:
denied { setattr } for pid=1256 comm="prelink" name="" dev=pipefs
ino=12392 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
/var/log/audit/audit.log:type=AVC msg=audit(1409128809.205:30): avc:
denied { setattr } for pid=1271 comm="prelink" name="" dev=pipefs
ino=12489 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
END [root@ip-10-9-187-212 ~]#
expectation: START END
closing irrelevant validation bugs |