Bug 1227326

Summary: [SELinux] [BVT]: SELinux throws AVC errors while running DHT automation on RHEL-7.1
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Prasanth <pprakash>
Component: distributeAssignee: Bug Updates Notification Mailing List <rhs-bugs>
Status: CLOSED ERRATA QA Contact: Jonathan Holloway <jholloway>
Severity: high Docs Contact:
Priority: high    
Version: rhgs-3.1CC: aloganat, annair, asrivast, mmalik, nbalacha, nsathyan, pprakash, rcyriac, vagarwal, vbhat
Target Milestone: ---   
Target Release: RHGS 3.1.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: selinux-policy-3.13.1-29.el7.noarch Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1229279 (view as bug list) Environment:
Last Closed: 2015-07-29 04:55:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1202842, 1212796, 1229279    
Attachments:
Description Flags
AVC-logs-from-RHEL-7.1-BVT_run_965669
none
avc logs_DHT_run for selinux-policy-3.13.1-26.el7 none

Description Prasanth 2015-06-02 12:37:39 UTC 
Created attachment 1033737 [details]
AVC-logs-from-RHEL-7.1-BVT_run_965669

Description of problem:
Selinux throws a AVC errors while running DHT automated test cases

Version-Release number of selected component (if applicable):
glusterfs-fuse-3.7.0-2.el6rhs.x86_64
glusterfs-libs-3.7.0-2.el6rhs.x86_64
glusterfs-client-xlators-3.7.0-2.el6rhs.x86_64
glusterfs-api-3.7.0-2.el6rhs.x86_64
glusterfs-3.7.0-2.el6rhs.x86_64
glusterfs-cli-3.7.0-2.el6rhs.x86_64
glusterfs-server-3.7.0-2.el6rhs.x86_64


How reproducible:
Always when we run BVT


Steps to Reproduce:
1. Not a manual process
2. Running DHT BVT on rhel7.1 server with downstream glusterfs3.7 packages

Actual results:
Selinux AVC errors found

Expected results:
No AVC errors


Additional info:
The BVT test result link, that has all the avc logs:
https://beaker.engineering.redhat.com/jobs/965669
Comment 1 Prasanth 2015-06-11 11:02:55 UTC 
Jonathan/MS/Apeksha,

Can any one of you please update the selinux-policy to "selinux-policy-3.13.1-26.el7" in your setup, re-run your tests and see if it fixes all the AVC's reported in this BZ?
Comment 2 Arthy Loganathan 2015-06-13 03:56:40 UTC 
Created attachment 1038219 [details]
avc logs_DHT_run for selinux-policy-3.13.1-26.el7
Comment 3 Milos Malik 2015-06-15 07:22:33 UTC 
Majority of AVCs was caused by BZ#1230932 which is fixed in selinux-policy-3.13.1-27.el7.
Comment 9 errata-xmlrpc 2015-07-29 04:55:16 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHSA-2015-1495.html