Bug 1925616

Summary: a candlepin SELinux denial that can appear when doing a change hostname sometimes
Product: Red Hat Satellite Reporter: Devendra Singh <desingh>
Component: SELinuxAssignee: Jonathon Turel <jturel>
Status: CLOSED ERRATA QA Contact: Peter Ondrejka <pondrejk>
Severity: high Docs Contact:
Priority: high    
Version: 6.9.0CC: desingh, egolov, ehelms, jturel, ktordeur, lhellebr, lzap, mshriver, pondrejk, smallamp, swadeley, tpapaioa, zhunting
Target Milestone: 6.9.0Keywords: AutomationBlocker, Patch, Regression, Reopened, Triaged
Target Release: Unused   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: katello-selinux-3.5.1 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1897360 Environment:
Last Closed: 2021-04-21 13:10:31 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1677872    

Comment 2 Jonathon Turel 2021-02-05 20:41:59 UTC
Connecting redmine issue https://projects.theforeman.org/issues/31499 from this bug

Comment 3 Peter Ondrejka 2021-03-01 12:24:18 UTC
Automation is still seeing the candlepin_events issue on snap 15 when attempting to run satellite-change-hostname

Comment 4 Jonathon Turel 2021-03-01 16:25:56 UTC
Hi Peter, that is surprising to me! On my Snap 15 I don't see any problems after using satellite-change-hostname. I need to learn more about your setup to get to the root of the problem and a box I can log in to that's exhibiting the issue would be ideal. My assumption is that you installed a fresh snap 15, changed the hostname w/ sat-change-hostname and saw the failure in 'hammer ping'. If that's not accurate please share as much detail as possible in terms of how your setup has diverged from my assumption. Thank you

Comment 5 Peter Ondrejka 2021-03-02 15:08:02 UTC
Hey, it was an automation run that was supposed to do what you describe, but looking closer at the results it turns out that candlepin_events were already dead when rename started, so it is the initial health check ping that fails. It could be due to some interference with other tests, will investigate more, but I consider it not a blocker for this bz

Comment 6 Sudhir Mallamprabhakara 2021-03-16 03:10:47 UTC
Peter - clone of this BZ is marked Verified. Any updates from your investigation??

Comment 7 Peter Ondrejka 2021-03-24 08:26:13 UTC
Verified in snap 18 via automation, s-c-h no longer hits the aforementioned issue

Comment 11 errata-xmlrpc 2021-04-21 13:10:31 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.9 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1313