Bug 2106268

Summary:	Leapp upgrade requires foreman-selinux and katello-selinux to be reinstalled
Product:	Red Hat Satellite	Reporter:	Evgeni Golov <egolov>
Component:	Packaging	Assignee:	Evgeni Golov <egolov>
Status:	CLOSED DUPLICATE	QA Contact:	Lukas Pramuk <lpramuk>
Severity:	high	Docs Contact:
Priority:	high
Version:	6.11.0	Keywords:	Triaged, Upgrades
Target Milestone:	Unspecified
Target Release:	Unused
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2023-03-08 08:29:56 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Evgeni Golov 2022-07-12 09:08:58 UTC

Description of problem:
After an upgrade of a Satellite with Leapp from EL7 to EL8, the new system is lacking the Selinux port labels, rendering the application unusable once the user tries to enable SELinux enforcing.

The workaround is to re-install the foreman-selinux and katello-selinux packages, as this will trigger re-adding the ports.

However, the reason the ports are not added during initial upgrade is that the %post scripts of the packages check if SELinux is enabled before doing *any* action -- and it is disabled during Leapp.

Other packages (candlepin-selinux, pulpcore-selinux) don't have this limitation and do not require re-installation.

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 Evgeni Golov 2022-07-12 09:10:11 UTC

Created redmine issue https://projects.theforeman.org/issues/35198 from this bug

Comment 5 Evgeni Golov 2023-03-08 08:29:56 UTC

This has been fixed via BZ#2122199 - closing.

*** This bug has been marked as a duplicate of bug 2122199 ***