Bug 1857170

Summary: [Ganesha+Selinux] Lock test is failing on v3 mount when selinux is in Enforcing mode
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Manisha Saini <msaini>
Component: nfs-ganeshaAssignee: Kaleb KEITHLEY <kkeithle>
Status: CLOSED CURRENTRELEASE QA Contact: Manisha Saini <msaini>
Severity: high Docs Contact:
Priority: unspecified    
Version: rhgs-3.5CC: arjsharm, dang, grajoria, kkeithle, mbenjamin, pasik, pprakash, puebele, rcyriac, rhs-bugs, sheggodu, skoduri, storage-qa-internal, zpytela
Target Milestone: ---Keywords: ZStream
Target Release: RHGS 3.5.z Async Update   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: nfs-ganesha-2.7.3-12.el7rhgs Doc Type: Bug Fix
Doc Text:
Cause: changes in base selinux policy Consequence: AVCs at runtime, ganesha cannot connect to the portmapper to connect to the rpc-lockd and create file locks Fix: allow connection to portmapper Result: file locking works
Story Points: ---
Clone Of: Environment:
Last Closed: 2020-11-17 14:52:46 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Comment 4 Manisha Saini 2020-07-20 13:52:26 UTC
Verified this BZ with

# rpm -qa | grep ganesha
glusterfs-ganesha-6.0-37.1.el7rhgs.x86_64
nfs-ganesha-2.7.3-12.el7rhgs.x86_64
nfs-ganesha-selinux-2.7.3-12.el7rhgs.noarch
nfs-ganesha-gluster-2.7.3-12.el7rhgs.x86_64


# getenforce
Enforcing

# ./a.out /mnt/ganesha/1G 
opening /mnt/ganesha/1G
opened; hit Enter to lock... 
locking
locked; hit Enter to write... 
Write succeeeded 
locked; hit Enter to unlock... 
unlocking

Lock test is passing with v3 mount.Moving this BZ to verified state