Bug 1845836

Summary:	[azure-file] "Permission denied" when read/write to mounted directory on RHEL node.
Product:	OpenShift Container Platform	Reporter:	Wei Duan <wduan>
Component:	Installer	Assignee:	Russell Teague <rteague>
Installer sub component:	openshift-ansible	QA Contact:	Wei Duan <wduan>
Status:	CLOSED ERRATA	Docs Contact:
Severity:	high
Priority:	unspecified	CC:	aos-bugs, gpei, jsafrane, rteague
Version:	4.5
Target Milestone:	---
Target Release:	4.3.z
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	SELinux permissions were blocking read/write access to mounted volumes on the Azur platform. SELinux booleans are updated to match RHCOS 8.x to allow proper access.	Story Points:	---
Clone Of:	1839965	Environment:
Last Closed:	2020-07-01 15:02:34 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1845830
Bug Blocks:	1845837

Comment 3 Wei Duan 2020-06-23 07:56:07 UTC

Verified pass on 4.3.0-0.nightly-2020-06-20-130223.

Starting pod/wduan0622c-nhxbn-rhel-0-debug ...
To use host binaries, run `chroot /host`
Pod IP: 10.0.1.8
If you don't see a command prompt, try pressing enter.

sh-4.2# chroot /host
sh-4.2# getsebool virt_use_samba
virt_use_samba --> on
sh-4.2# getsebool container_use_cephfs
container_use_cephfs --> on

Comment 5 errata-xmlrpc 2020-07-01 15:02:34 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2020:2628