Bug 1797111
| Summary: | Ganglia web pages cannot be served | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Vladimir Florinski <vaf0001> |
| Component: | ganglia | Assignee: | Terje Røsten <terje.rosten> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | high | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 31 | CC: | jose.p.oliveira.oss, terje.rosten |
| Target Milestone: | --- | Keywords: | Reopened |
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | ganglia-3.7.2-30.fc31 ganglia-3.7.2-30.fc30 ganglia-3.7.2-31.fc30 ganglia-3.7.2-31.fc31 | Doc Type: | If docs needed, set a value |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2020-02-20 04:46:05 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Vladimir Florinski
2020-01-31 22:26:44 UTC
FEDORA-2020-d8017af5f8 has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2020-d8017af5f8 FEDORA-2020-286728121a has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2020-286728121a Hi! Can you please try the updated version available in testing (as indicated above)? ganglia-3.7.2-30.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-286728121a ganglia-3.7.2-30.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-d8017af5f8 I see no change in the testing version. The web interface is still not working. ganglia-3.7.2-30.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report. ganglia-3.7.2-30.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report. re-open FEDORA-2020-73716bcffb has been submitted as an update to Fedora 31. https://bodhi.fedoraproject.org/updates/FEDORA-2020-73716bcffb FEDORA-2020-14d275a72b has been submitted as an update to Fedora 30. https://bodhi.fedoraproject.org/updates/FEDORA-2020-14d275a72b hi again, please try this new attempt to fix the issue. ganglia-3.7.2-31.fc31 has been pushed to the Fedora 31 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-73716bcffb ganglia-3.7.2-31.fc30 has been pushed to the Fedora 30 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2020-14d275a72b This update resolved the issue. The web page is now displayed correctly. There remained some small problems with SELinux policies that prevented the web server and rrdtool from accessing ganglia resources:
type=AVC msg=audit(1581612226.590:4294): avc: denied { name_connect } for pid=895727 comm="php-fpm" dest=8652 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=0
type=AVC msg=audit(1581614441.377:4384): avc: denied { map } for pid=895727 comm="php-fpm" path="/var/lib/ganglia-web/dwoo/compiled/templates/default/cluster_view.tpl.d17.php" dev="sda3" ino=787631 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:httpd_var_lib_t:s0 tclass=file permissive=0
type=AVC msg=audit(1581614802.670:4420): avc: denied { map } for pid=2101168 comm="rrdtool" path="/var/lib/ganglia/rrds/TestCluster/clusterhn.ch2039.lan/load_one.rrd" dev="sda3" ino=3670126 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:httpd_var_lib_t:s0 tclass=file permissive=0
that can be fixed by issuing
setsebool -P httpd_can_network_connect=on domain_can_mmap_files=on
I don't know if this compromises the overall security. If the change is benign, perhaps the commands could be included in the ganglia's RPM postinstall script?
selinux policy is not shipped in package, the package selinux-policy has policy for all and everything. Open report against this package to discuss this problem. ganglia-3.7.2-31.fc30 has been pushed to the Fedora 30 stable repository. If problems still persist, please make note of it in this bug report. ganglia-3.7.2-31.fc31 has been pushed to the Fedora 31 stable repository. If problems still persist, please make note of it in this bug report. |