Bug 1187354

Summary:	possible incorrect selinux check in 97-mysql-selinux
Product:	[Community] RDO	Reporter:	Harm Weites <harm>
Component:	openstack-tripleo-image-elements	Assignee:	James Slagle <jslagle>
Status:	CLOSED EOL	QA Contact:	Shai Revivo <srevivo>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	Juno
Target Milestone:	---
Target Release:	Juno
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2016-05-19 15:37:50 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Harm Weites 2015-01-29 20:30:47 UTC

Description of problem:
In /usr/share/tripleo-image-elements/mysql-common/os-refresh-config/pre-configure.d/97-mysql-selinux there is some selinux stuff performed if selinux is enabled on the system:

[ -x /usr/sbin/semanage ] || exit 0

In my case (atleast on Fedora21) selinux is only disabled through /etc/sysconfig/selinux:

# grep SELINUX /etc/sysconfig/selinux
SELINUX=disabled

The script does not detect this since the binary is still executable. Eventhough I might be wrong in my way of disabling selinux, it would be nice if it could just check what's configured in /etc/. Instead of just trusting the binary.

Version-Release number of selected component (if applicable):
fedora-release-21-2.noarch
openstack-tripleo-heat-templates-0.7.9-5.fc22.noarch
openstack-tripleo-image-elements-0.8.10-8.fc22.noarch
openstack-tripleo-0.0.5-2c3fb309727671130a32b4c19de48ec22c8530aa1.fc22.noarch

Comment 3 Chandan Kumar 2016-05-19 15:37:50 UTC

This bug is against a Version which has reached End of Life.
If it's still present in supported release (http://releases.openstack.org), please update Version and reopen.