Bug 2223791

Summary: SELinux troubleshooting options were missing with the error failed to initialize plugins in /usr/share/setroubleshoot/plugins: No module named 'imp'
Product: [Fedora] Fedora Reporter: Matt Fagnani <matt.fagnani>
Component: setroubleshoot-pluginsAssignee: Petr Lautrbach <plautrba>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: medium Docs Contact:
Priority: unspecified    
Version: rawhideCC: dwalsh, mmalik, plautrba, vmojzis
Target Milestone: ---Keywords: Regression
Target Release: ---   
Hardware: Unspecified   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2023-07-24 10:46:07 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Matt Fagnani 2023-07-18 23:35:30 UTC
I booted Fedora-KDE-Live-x86_64-Rawhide-20230718.n.0.iso in a GNOME Boxes QEMU/KVM VM on a Fedora 38 KDE Plasma installation. mkfs was denied mounton access on /proc/1018/mounts when starting systemd-zram-setup during boot according to the journal as I reported at https://bugzilla.redhat.com/show_bug.cgi?id=2223788 I ran sudo dnf install setroubleshoot in Konsole to install setroubleshoot-3.3.32-4.fc39.x86_64 and setroubleshoot-plugins-3.3.14-6.fc38.noarch. I reproduced the denial with sudo systemctl restart systemd-zram-setup in Konsole. I started the SELinux troubleshooter sealert. I clicked on the Troubleshoot button for the mkfs denial. The area where the troubleshooting options are normally only showed If you were trying to...Then this is the solution. The troubleshooting instructions and buttons such as Plugin Details and Report Bug were missing. The journal showed errors like "failed to initialize plugins in /usr/share/setroubleshoot/plugins: No module named 'imp'"

Jul 18 18:45:56 sudo[2845]: liveuser : TTY=pts/1 ; PWD=/home/liveuser ; USER=root ; COMMAND=/usr/bin/systemctl restart systemd-zram-setup
Jul 18 18:45:56 sudo[2845]: pam_unix(sudo:session): session opened for user root(uid=0) by liveuser(uid=1000)
Jul 18 18:45:56 systemd[1]: Deactivating swap dev-zram0.swap - Compressed Swap on /dev/zram0...
Jul 18 18:45:56 systemd[1]: dev-zram0.swap: Deactivated successfully.
Jul 18 18:45:56 systemd[1]: Deactivated swap dev-zram0.swap - Compressed Swap on /dev/zram0.
Jul 18 18:45:56 systemd[1]: Stopping systemd-zram-setup - Create swap on /dev/zram0...
Jul 18 18:45:56 kernel: zram0: detected capacity change from 5883904 to 0
Jul 18 18:45:56 systemd[1]: systemd-zram-setup: Deactivated successfully.
Jul 18 18:45:56 systemd[1]: Stopped systemd-zram-setup - Create swap on /dev/zram0.
Jul 18 18:45:56 systemd[1]: Starting systemd-zram-setup - Create swap on /dev/zram0...
Jul 18 18:45:56 kernel: zram0: detected capacity change from 0 to 5883904
Jul 18 18:45:56 systemd-makefs[2855]: /dev/zram0 successfully formatted as swap (label "zram0", uuid 12aed954-0fc3-4a3f-af6c-1ffd605a1213)
Jul 18 18:45:56 systemd[1]: Finished systemd-zram-setup - Create swap on /dev/zram0.
Jul 18 18:45:56 sudo[2845]: pam_unix(sudo:session): session closed for user root
Jul 18 18:45:56 systemd[1]: Activating swap dev-zram0.swap - Compressed Swap on /dev/zram0...
Jul 18 18:45:56 kernel: Adding 2941948k swap on /dev/zram0.  Priority:100 extents:1 across:2941948k SSDscFS
Jul 18 18:45:56 systemd[1]: Activated swap dev-zram0.swap - Compressed Swap on /dev/zram0.
Jul 18 18:45:58 systemd[1]: Starting setroubleshootd.service - SETroubleshoot daemon for processing new SELinux denial logs...
Jul 18 18:46:00 systemd[1]: Started setroubleshootd.service - SETroubleshoot daemon for processing new SELinux denial logs.
Jul 18 18:46:00 setroubleshoot[2860]: failed to initialize plugins in /usr/share/setroubleshoot/plugins: No module named 'imp'
Jul 18 18:46:01 systemd[1]: Created slice system-dbus\x2d:1.3\x2dorg.fedoraproject.SetroubleshootPrivileged.slice - Slice /system/dbus-:1.3-org.fedoraproject.SetroubleshootPrivileged.
Jul 18 18:46:01 systemd[1]: Started dbus-:1.3-org.fedoraproject.SetroubleshootPrivileged.
Jul 18 18:46:05 setroubleshoot[2860]: SELinux is preventing (mkfs) from mounton access on the file /proc/<pid>/mounts. For complete SELinux messages run: sealert -l 828e413a-4e14-472d-abd2-31b9b12dd47c
Jul 18 18:46:05 setroubleshoot[2860]: failed to initialize plugins in /usr/share/setroubleshoot/plugins: No module named 'imp'
Jul 18 18:46:05 setroubleshoot[2860]: SELinux is preventing (mkfs) from mounton access on the file /proc/<pid>/mounts.
                                      
Jul 18 18:46:12 systemd[1]: dbus-:1.3-org.fedoraproject.SetroubleshootPrivileged: Deactivated successfully.
Jul 18 18:46:12 systemd[1]: dbus-:1.3-org.fedoraproject.SetroubleshootPrivileged: Consumed 2.431s CPU time.
Jul 18 18:46:15 systemd[1]: setroubleshootd.service: Deactivated successfully.
Jul 18 18:46:15 systemd[1]: setroubleshootd.service: Consumed 1.755s CPU time.

python3-3.12.0~b4-1.fc39.x86_64 was installed. imp was removed in Python 3.12 according to https://docs.python.org/3.12/whatsnew/3.12.html

Reproducible: Always

Steps to Reproduce:
1. boot Fedora-KDE-Live-x86_64-Rawhide-20230718.n.0.iso https://koji.fedoraproject.org/koji/buildinfo?buildID=2234366 in a GNOME Boxes QEMU/KVM VM on a Fedora 38 KDE Plasma installation.
2. start Konsole in the VM
3. sudo dnf install setroubleshoot in Konsole
4. sudo systemctl restart systemd-zram-setup
5. start sealert
6. Click on Troubleshoot for the denial in sealert
Actual Results:  
SELinux troubleshooting options were missing with the error failed to initialize plugins in /usr/share/setroubleshoot/plugins: No module named 'imp'

Expected Results:  
The troubleshooting plugin instructions and buttons should have been shown in sealert.

Comment 1 Petr Lautrbach 2023-07-24 10:46:07 UTC

*** This bug has been marked as a duplicate of bug 2224393 ***