Bug 1372453

Summary: Selinux is blocking ovs-vswitchd (openvswitch)
Product: Red Hat OpenStack Reporter: Arie Bregman <abregman>
Component: openstack-selinuxAssignee: Ryan Hallisey <rhallise>
Status: CLOSED ERRATA QA Contact: Udi Shkalim <ushkalim>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 9.0 (Mitaka)CC: jschluet, lhh, mgrepl, srevivo
Target Milestone: Upstream M3Keywords: Automation, AutomationBlocker, Triaged
Target Release: 10.0 (Newton)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-selinux-0.7.7-1.el7ost Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2016-12-14 15:55:26 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Arie Bregman 2016-09-01 18:41:44 UTC 
Description of problem:
Selinux denies openvswitch operations

Version-Release number of selected component (if applicable):
selinux-policy-targeted-3.13.1-60.el7.noarch
libselinux-utils-2.2.2-6.el7.x86_64
libselinux-python-2.2.2-6.el7.x86_64
selinux-policy-3.13.1-60.el7.noarch
libselinux-2.2.2-6.el7.x86_64
openstack-selinux-0.7.3-3.el7ost.noarch
libselinux-devel-2.2.2-6.el7.x86_64

Steps to Reproduce:
1. Install RHOSP 9 with openvswitch

Actual results:
ovs-vswitchd: ovs|06413|stream_tcp|ERR|tcp:127.0.0.1:5938: connect: Permission denied

Expected results:
Connection established

Additional info:
Logs provided.
Comment 5 Arie Bregman 2016-09-25 12:55:36 UTC 
Important detail: it happens when running dsvm-functional tests.
Comment 9 errata-xmlrpc 2016-12-14 15:55:26 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-2948.html