Bug 1264505

Summary: [restorecond] Don't throw error if /root/.ssh/ doesn't exist or it gets a SIGTERM
Product: [Fedora] Fedora Reporter: Christian Stadelmann <fedora>
Component: policycoreutilsAssignee: Petr Lautrbach <plautrba>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 24CC: dwalsh, mgrepl, plautrba, vmojzis
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: policycoreutils-2.5-20.fc25 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1422121 (view as bug list) Environment:
Last Closed: 2017-04-09 21:51:55 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1422121    

Description Christian Stadelmann 2015-09-18 15:44:48 UTC
Description of problem:
On every reboot, restorecond logs this error message to syslog:
`restorecond[695]: Unable to watch (/root/.ssh/*) No such file or directory`
And /root/.ssh/ doesn't exist. I don't think restorecond should throw an error in this case. I find it completely normal to not have a /root/.ssh/ folder thus restorecon should not even warn about that.

When restorecond is receiving a SIGTERM (e.g. on shutdown) it throws an error too:
`restorecond[709]: terminated`
I don't see why this should be an error message. If you need this message at all, a INFO loglevel should be enough.


Version-Release number of selected component (if applicable):
policycoreutils-restorecond-2.3-18.fc22.x86_64
policycoreutils-restorecond-2.3-17.fc22.x86_64

How reproducible:
on every reboot

Additional info:
restorecond might throw more errors, I haven't tested the whole codebase.

Comment 1 Fedora End Of Life 2016-07-19 17:56:47 UTC
Fedora 22 changed to end-of-life (EOL) status on 2016-07-19. Fedora 22 is
no longer maintained, which means that it will not receive any further
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of
Fedora please feel free to reopen this bug against that version. If you
are unable to reopen this bug, please file a new report against the
current release. If you experience problems, please add a comment to this
bug.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 2 Christian Stadelmann 2016-07-20 11:31:14 UTC
Still present.

Comment 3 Vit Mojzis 2017-01-05 11:39:00 UTC
Thank you for reporting the issue. 
There is a pull request to decrease loglevel of the termination message.
https://github.com/fedora-selinux/selinux/pull/36

As for the "watch" error, please edit your /etc/selinux/restorecond.conf (paths to be watched) accordingly.

Comment 4 Christian Stadelmann 2017-01-16 23:43:49 UTC
(In reply to Vit  Mojzis from comment #3)
> Thank you for reporting the issue. 
> There is a pull request to decrease loglevel of the termination message.
> https://github.com/fedora-selinux/selinux/pull/36
> 
> As for the "watch" error, please edit your /etc/selinux/restorecond.conf
> (paths to be watched) accordingly.

Thank you!

Comment 5 Petr Lautrbach 2017-04-06 15:34:06 UTC
policycoreutils-2.6-5.fc27 -
https://koji.fedoraproject.org/koji/taskinfo?taskID=18820403

Comment 6 Fedora Update System 2017-04-06 16:16:24 UTC
policycoreutils-2.6-5.fc26 libselinux-2.6-5.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-f21a1bffda

Comment 7 Fedora Update System 2017-04-07 07:41:58 UTC
policycoreutils-2.5-20.fc25 has been submitted as an update to Fedora 25. https://bodhi.fedoraproject.org/updates/FEDORA-2017-c89d1d37d0

Comment 8 Fedora Update System 2017-04-07 19:57:59 UTC
policycoreutils-2.5-20.fc25 has been pushed to the Fedora 25 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-c89d1d37d0

Comment 9 Fedora Update System 2017-04-07 21:20:58 UTC
libselinux-2.6-5.fc26, policycoreutils-2.6-5.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-f21a1bffda

Comment 10 Fedora Update System 2017-04-09 21:51:55 UTC
policycoreutils-2.5-20.fc25 has been pushed to the Fedora 25 stable repository. If problems still persist, please make note of it in this bug report.

Comment 11 Fedora Update System 2017-04-12 14:50:57 UTC
libselinux-2.6-5.fc26, policycoreutils-2.6-5.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.