Bug 1157185

Summary: vdsm does not set selinux booleans during installation when selinux disabled
Product: Red Hat Enterprise Virtualization Manager Reporter: Yaniv Bronhaim <ybronhei>
Component: vdsmAssignee: Yaniv Bronhaim <ybronhei>
Status: CLOSED CURRENTRELEASE QA Contact: Petr Kubica <pkubica>
Severity: urgent Docs Contact:
Priority: unspecified    
Version: 3.5.0CC: aberezin, bazulay, bilias, coudim.ne, daniel.helgenberger, danken, ecohen, gklein, iheim, lpeer, lsurette, nabinger.reid, ogofen, oourfali, pstehlik, s.kieske, yeylon
Target Milestone: ---Keywords: ZStream
Target Release: 3.5.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: infra
Fixed In Version: vdsm-4.16.7.3-1.el6ev Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1157227 (view as bug list) Environment:
Last Closed: 2015-02-16 13:40:19 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Infra RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1122979, 1155170, 1157227    

Description Yaniv Bronhaim 2014-10-25 21:19:24 UTC 
Description of problem:
Currently vdsm sets selinux booleans during vdsm installation. recently we faced issues while selinux was disabled during installation and therefore vdsm failed to set the booleans and it leaded to failures during run time (see Bug #1150243)

In this bug scope we will move the set part to be part of the configure. means that the set booleans configurations will be performed while the user calls "vdsm-tool configure" as part of deploying the host.
Comment 2 Yaniv Bronhaim 2014-10-26 11:40:20 UTC 
*** Bug 1156038 has been marked as a duplicate of this bug. ***
Comment 3 Yaniv Bronhaim 2014-10-27 12:00:23 UTC 
*** Bug 1155292 has been marked as a duplicate of this bug. ***
Comment 4 Petr Kubica 2014-11-07 16:23:39 UTC 
Verified in vdsm-4.16.7.3-1.el6ev.x86_64

###
$vdsm-tool configure

Checking configuration status...

libvirt is already configured for vdsm
SUCCESS: ssl configured to true. No conflicts

Running configure...

Done configuring modules to VDSM.
###

$getsebool -a
...
sanlock_use_fusefs --> on
sanlock_use_nfs --> on
sanlock_use_samba --> on
..
virt_use_fusefs --> on
virt_use_nfs --> on
virt_use_samba --> on
virt_use_sanlock --> on
...