Bug 1639710
Summary: | PKI subsystem process is not shutdown when there is no space on the disk to write logs | ||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 7 | Reporter: | Asha Akkiangady <aakkiang> | ||||||||
Component: | pki-core | Assignee: | Endi Sukma Dewata <edewata> | ||||||||
Status: | CLOSED ERRATA | QA Contact: | Asha Akkiangady <aakkiang> | ||||||||
Severity: | high | Docs Contact: | Marc Muehlfeld <mmuehlfe> | ||||||||
Priority: | high | ||||||||||
Version: | 7.6 | CC: | aakkiang, cfu, cpelland, dpunia, edewata, mharmsen, msauton | ||||||||
Target Milestone: | rc | Keywords: | TestCaseProvided, ZStream | ||||||||
Target Release: | --- | ||||||||||
Hardware: | All | ||||||||||
OS: | Linux | ||||||||||
Whiteboard: | |||||||||||
Fixed In Version: | pki-core-10.5.16-2.el7 | Doc Type: | Bug Fix | ||||||||
Doc Text: |
.Certificate System automatically shuts down if signed audit logs cannot be stored due to a full file system
Previously, if audit signing was enabled and the file system on which Certificate System stored the signed audit logs was full, Certificate System continued operating but did not log further operations. To prevent missing signed audit logs, Certificate System now shuts down automatically in the mentioned scenario.
|
Story Points: | --- | ||||||||
Clone Of: | |||||||||||
: | 1643880 (view as bug list) | Environment: | |||||||||
Last Closed: | 2019-08-06 13:07:19 UTC | Type: | Bug | ||||||||
Regression: | --- | Mount Type: | --- | ||||||||
Documentation: | --- | CRM: | |||||||||
Verified Versions: | Category: | --- | |||||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||||
Embargoed: | |||||||||||
Bug Depends On: | |||||||||||
Bug Blocks: | 1643880 | ||||||||||
Attachments: |
|
Description
Asha Akkiangady
2018-10-16 12:37:18 UTC
One correction needed in step #2. # /usr/sbin/semanage fcontext -a -t pki_ca_log_t /audit-logs Created attachment 1494363 [details]
CA Agent UI partially responding when audit signing log is full
Created attachment 1494557 [details]
Debug log messages attached
Christina & Asha, Please take a look at the following: Patches: https://github.com/dogtagpki/pki/pull/74 Docs: https://github.com/edewata/pki/blob/ticket-3070-v10.5/docs/admin/Signed_Audit_Logging_Failures.md Build: https://copr.devel.redhat.com/coprs/edewata/pki-10.5/build/23782/ Thanks! Endi, is this bug related to the following? https://bugzilla.redhat.com/show_bug.cgi?id=1248216 Not really. Bug #1248216 is about pkidaemon not showing an accurate subsystem status (it can be obtained using pki-server subsystem-find command). The current bug is about one scenario that might cause a subsystem to shutdown. Asha, please provide a qa_ack. Thanks! Fixed in PKI 10.5 branch: * https://github.com/dogtagpki/pki/commit/d5b119cdf3693680d5d1518b4b21b436d442708b * https://github.com/dogtagpki/pki/commit/7c3711c786ba90fe29b7450530dd8372d5839fcd * https://github.com/dogtagpki/pki/commit/5e7d7b972f14d65781909f6dfee4ad1e7ecb801a * https://github.com/dogtagpki/pki/commit/54c1b9b04625de6f3493e5d28979a740b31e63b3 Upstream doc: https://github.com/dogtagpki/pki/blob/DOGTAG_10_5_BRANCH/docs/admin/Signed_Audit_Logging_Failures.md The verification steps were provided in the original bug description. Created attachment 1580599 [details]
Browser Screenshot
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHBA-2019:2228 |