Bug 1536579

Summary: current mock triggers SElinux AVC's, and fails to stop some processes
Product: [Fedora] Fedora EPEL Reporter: R P Herrold <herrold>
Component: mockAssignee: Miroslav Suchý <msuchy>
Status: CLOSED WORKSFORME QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: epel7CC: extras-qa, jdisnard, jkeating, mebrown, msuchy, praiskup, williams
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1528414 Environment:
Last Closed: 2020-02-24 07:35:01 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1528414    
Bug Blocks:    

Description R P Herrold 2018-01-19 16:52:05 UTC
+++ This bug was initially created as a clone of Bug #1528414 +++

[herrold@centos-7 bin]$ ./which-signer.sh mock
mock-1.4.7-2.el7.noarch
Fedora EPEL (7) <epel> 352c64e5 52ae6884 
Version-Release number of selected component (if applicable):

mock-1.4.7-2.el7.noarch

How reproducible:

0. install fedora-review

1. mkdir a temporary directory 

2. place a SRPM and accompanying SPEC file in a directory

3. run: fedora-review -n ./directory/${packagename}

this eventually shells off into mock, and dies (it does a couple retries) for want of the needed directory

I patched to get past the missing directory issue, so I could look further

...

--- Additional comment from R P Herrold on 2018-01-19 11:43:37 EST ---

interestingly, I am not getting SElinux denials once past the first item

type=USER_AVC msg=audit(1516379905.117:47328): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { stop } for auid=n/a uid=0 gid=0 path="/run/systemd/system/machine-86355ec3dedd4b5784e215aefd50b775.scope" cmdline="/usr/lib/systemd/systemd-machined" scontext=system_u:system_r:systemd_machined_t:s0 tcontext=system_u:object_r:systemd_unit_file_t:s0 tclass=service  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'


Do you want this in a separate bug, cloned from this one?

(later)

I looked and there was not an open and relevant mock bug on this, so I cloned it

Comment 1 Pavel Raiskup 2019-11-06 08:25:15 UTC
Can you please test with mock-1.4.21 from
https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2019-0549ec172d ?

Comment 2 Pavel Raiskup 2020-02-24 07:35:01 UTC
Closing for inactivity.  Please reopen if you still observe the same problem.

Comment 3 Red Hat Bugzilla 2023-09-14 04:15:48 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days