Bug 1365187

Summary:	AVC denied unlink/write for passenger and 500 Internal Server Errors
Product:	Red Hat Quickstart Cloud Installer	Reporter:	Thom Carlin <tcarlin>
Component:	Installation - Satellite	Assignee:	Derek Whatley <dwhatley>
Status:	CLOSED WONTFIX	QA Contact:	Dave Johnson <dajohnso>
Severity:	medium	Docs Contact:	Julie <juwu>
Priority:	unspecified
Version:	1.0	CC:	bthurber, dwhatley, tsanders
Target Milestone:	---	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:
Clones:	1369478 (view as bug list)		Environment:
Last Closed:	2021-01-19 14:41:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1369478
Bug Blocks:

Description Thom Carlin 2016-08-08 14:53:48 UTC

Description of problem:

Receiving "500 Internal Server errors" on Satellite 6 for latest compose

Version-Release number of selected component (if applicable):

QCI-1.0-RHEL-7-20160806.t.0

How reproducible:

Believe 100%

Steps to Reproduce:
1. Install/configure QCI
   Register Sat 6 system to RHN
2. yum update
3. Reboot
4. restorecon -RFvv /
5. http://sat6_fqdn
6. grep -i denied /var/log/audit/audit.log

Actual results:

"Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log."

"type=AVC msg=audit(1470659632.836:124): avc:  denied  { unlink } for  pid=3101 comm="ruby" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659633.018:125): avc:  denied  { unlink } for  pid=2842 comm="PassengerHelper" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659634.866:126): avc:  denied  { unlink } for  pid=3852 comm="PassengerHelper" name="ruby.9lWcbdETUQepw3phiRKo2GKek" dev="tmpfs" ino=29352 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470661086.721:130): avc:  denied  { write } for  pid=3147 comm="httpd" name="request" dev="tmpfs" ino=25061 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file"

Expected results:

Working web UI
No errors

Additional info:

Workaround:
katello-service restart