Bug 1534119

Summary: lldpad startup fails due to SELinux map denial (breaks FCoE)
Product: [Fedora] Fedora Reporter: lnie <lnie>
Component: selinux-policyAssignee: Lukas Vrabec <lvrabec>
Status: CLOSED RAWHIDE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: urgent    
Version: rawhideCC: awilliam, cleech, dwalsh, fzatlouk, jiri, kparal, lbrabec, lnie, lvrabec, mgrepl, plautrba, pmoore, robatino
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard: AcceptedBlocker
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-02-01 13:53:53 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1469206    
Attachments:
Description Flags
journal
none
journal none

Description lnie 2018-01-13 10:23:42 UTC 
Description of problem:
I know lldpad is supposed to be disabled for Broadcom devices,
but intel devices really dose need lldpad,please fix this,thanks a lot.
Actually,fcoe-utils doesn't work well with Broadcom devices since f27,please see bug#1534118


Version-Release number of selected component (if applicable):
kernel-4.15.0-0.rc7.git2.1.fc28.x86_64
fcoe-utils-1.0.32-3.fc27.x86_64
lldpad-1.0.1-8.git036e314.fc27.x86_64

How reproducible:
always

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 lnie 2018-01-14 02:09:22 UTC 
Created attachment 1380854 [details]
journal
Comment 2 Adam Williamson 2018-01-23 08:24:42 UTC 
This may be due to an selinux denial:

Jan 13 20:57:40 storageqe-13.rhts.eng.bos.redhat.com audit[8667]: AVC avc:  denied  { map } for  pid=8667 comm="lldpad" path="/dev/shm/lldpad.state" dev="tmpfs" ino=30443 scontext=system_u:system_r:lldpad_t:s0 tcontext=system_u:object_r:lldpad_tmpfs_t:s0 tclass=file permissive=0

lili, can you try it with enforcing=0 boot parameter and see if it works then? Thanks!
Comment 3 lnie 2018-01-23 12:08:08 UTC 
Created attachment 1384817 [details]
journal
Comment 4 lnie 2018-01-23 12:11:36 UTC 
Adam,systemctl start lldpad successfully,after setenforce 0:)
Comment 5 lnie 2018-01-23 12:29:23 UTC 
*** Bug 1534118 has been marked as a duplicate of this bug. ***
Comment 6 Adam Williamson 2018-01-23 13:13:12 UTC 
Proposing as a Final blocker: criterion "The installer must be able to detect (if possible) and install to supported network-attached storage devices." (I think that's right, right lili? This breaks FCoE install / boot?)
Comment 7 lnie 2018-01-24 03:02:10 UTC 
Adam,right,fcoe dosen't works on ixgbe drivers without lldpad running
Comment 8 Kamil Páral 2018-01-29 12:39:05 UTC 
+1 blocker per comment 6
Comment 9 František Zatloukal 2018-01-29 12:39:43 UTC 
+1 blocker
Comment 10 Lukas Brabec 2018-01-29 12:39:59 UTC 
+1 blocker
Comment 11 Kamil Páral 2018-01-29 12:41:21 UTC 
Marking as accepted blocker.