| Summary: | Upgrading RHELAH 7.2.6-1 to 7.3 results in error: fsetxattr: Invalid argument | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 7 | Reporter: | Alex Jia <ajia> |
| Component: | rpm-ostree-client | Assignee: | Colin Walters <walters> |
| Status: | CLOSED CURRENTRELEASE | QA Contact: | atomic-bugs <atomic-bugs> |
| Severity: | high | Docs Contact: | Yoana Ruseva <yruseva> |
| Priority: | high | ||
| Version: | 7.3 | CC: | ajia, dornelas, miabbott, mmalik, rcook, smilner, yruseva |
| Target Milestone: | rc | Keywords: | Extras |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | selinux-policy-3.13.1-63.atomic.el7.7 | Doc Type: | Known Issue |
| Doc Text: |
Cause:
Attempting to upgrade from 7.2.6 to 7.3.
Consequence:
The upgrade fails with "error: fsetxattr: Invalid argument"
Workaround (if any):
There are three possible workarounds:
1) setenforce 0
atomic host upgrade
2) systemctl stop rpm-ostreed
cp /usr/libexec/rpm-ostreed /usr/local/bin/rpm-ostreed
chcon -t install_exec_t /usr/local/bin/rpm-ostreed
/usr/local/bin/rpm-ostreed &
atomic host upgrade
3) atomic host deploy 7.2.7 && systemctl reboot
atomic host upgrade
Result:
The upgrade will work as expected.
|
Story Points: | --- |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-09-22 17:10:35 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Comment 4
Micah Abbott
2016-09-21 13:59:19 UTC
Do you see any SELinux denials? # ausearch -m avc -m selinux_err -i -ts today There are several workarounds: 1) setenforce 0 atomic host upgrade 2) systemctl stop rpm-ostreed cp /usr/libexec/rpm-ostreed /usr/local/bin/rpm-ostreed chcon -t install_exec_t /usr/local/bin/rpm-ostreed /usr/local/bin/rpm-ostreed & atomic host upgrade 3) atomic host deploy 7.2.7 && systemctl reboot atomic host upgrade (In reply to Milos Malik from comment #5) > Do you see any SELinux denials? > > # ausearch -m avc -m selinux_err -i -ts today Milos, there is no audit package is shipped in RHELAH, I will install it w/ unlock mode if need. (In reply to Alex Jia from comment #7) > (In reply to Milos Malik from comment #5) > > Do you see any SELinux denials? > > > > # ausearch -m avc -m selinux_err -i -ts today > > Milos, there is no audit package is shipped in RHELAH, I will install it w/ > unlock mode if need. But the SELinux doesn't work well w/ overlay filesystem. (In reply to Alex Jia from comment #7) > (In reply to Milos Malik from comment #5) > > Do you see any SELinux denials? > > > > # ausearch -m avc -m selinux_err -i -ts today > > Milos, there is no audit package is shipped in RHELAH, I will install it w/ > unlock mode if need. [cloud-user@atomic-host-001 ~]$ sudo ausearch -m avc -m selinux_err -i -ts today ---- type=SYSCALL msg=audit(09/21/2016 16:31:03.170:500) : arch=x86_64 syscall=fsetxattr success=no exit=EINVAL(Invalid argument) a0=0x31 a1=0x7f5ef5012f51 a2=0x7f5ef5012f62 a3=0x32 items=0 ppid=1 pid=13210 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=pool exe=/usr/libexec/rpm-ostreed subj=system_u:system_r:unconfined_service_t:s0 key=(null) type=SELINUX_ERR msg=audit(09/21/2016 16:31:03.170:500) : op=setxattr invalid_context=system_u:object_r:systemd_machined_unit_file_t:s0 type=AVC msg=audit(09/21/2016 16:31:03.170:500) : avc: denied { mac_admin } for pid=13210 comm=pool capability=mac_admin scontext=system_u:system_r:unconfined_service_t:s0 tcontext=system_u:system_r:unconfined_service_t:s0 tclass=capability2 The backported fix to 'selinux-policy' which was shipped in 7.2.7 will fix this error. See https://bugzilla.redhat.com/show_bug.cgi?id=1372792 Customers not using the 7.2.7 release will have to use one of the workarounds described in the Doc Text field. *** Bug 1393994 has been marked as a duplicate of this bug. *** |