Bug 469162

Summary: Directory /var/lib/iscsi is NOT owned by iscsi-initiator-utils
Product: Red Hat Enterprise Linux 5 Reporter: Milos Malik <mmalik>
Component: iscsi-initiator-utilsAssignee: Mike Christie <mchristi>
Status: CLOSED ERRATA QA Contact: Martin Jenner <mjenner>
Severity: medium Docs Contact:
Priority: medium    
Version: 5.3CC: coughlan, duck, mchristi, mgahagan, syeghiay
Target Milestone: rc   
Target Release: ---   
Hardware: All   
OS: Linux   
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-01-20 20:57:54 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Milos Malik 2008-10-30 11:23:48 UTC
Description of problem:
The package owns /var/lock/iscsi but does not own /var/lib/iscsi. Why?

The filesystem on newly installed RHEL-5.3 machine contains /var/lib/iscsi with wrong SELinux label (correct context is recorded in SELinux policy but is not applied in the filesystem until you call restorecon -v /var/lib/iscsi).

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
* install new RHEL-5.3 machine (via RHTS)
* install iscsi-initiator-utils package
# rpm -qf /var/lock/iscsi
# rpm -qf /var/lib/iscsi
file /var/lib/iscsi is not owned by any package
# matchpathcon -V /var/lock/iscsi
/var/lock/iscsi verified.
# matchpathcon -V /var/lib/iscsi
/var/lib/iscsi has context root:object_r:rpm_var_lib_t:s0, should be system_u:object_r:iscsi_var_lib_t:s0
Actual results:

Expected results:

Additional info:

Comment 1 Mike Christie 2008-10-30 21:17:54 UTC
Is this due to a goof up in the spec?


%dir /var/lib/iscsi/nodes
%dir /var/lib/iscsi/send_targets
%dir /var/lib/iscsi/static
%dir /var/lib/iscsi/slp
%dir /var/lib/iscsi/isns
%dir /var/lib/iscsi/ifaces
%dir /var/lock/iscsi

Is there also supposed to be a

%dir /var/lib/iscsi


Comment 2 Milos Malik 2008-10-31 08:57:43 UTC
I think that both /var/lock/iscsi and /var/lib/iscsi should be written in %files section.

Comment 3 Mike Christie 2008-10-31 17:24:58 UTC
Adding devel ACK. This seems like it is low risk so I am also setting the 5.3 flag (not sure if I need to set the exception flag too).

Comment 4 Tom Coughlan 2008-10-31 18:09:26 UTC
(In reply to comment #3)
> (not sure if I need to set the exception flag too).

Yes, after beta ships the BZ has to have exception or blocker. Otherwise it gets deflagged. I'll set blocker, since we really should not ship it this way.

Comment 7 Mike Christie 2008-11-05 15:45:21 UTC
Checked in iscsi-initiator-utils

Comment 12 Mike Gahagan 2008-12-15 02:49:42 UTC
verified in snapshot 6.

Installed: iscsi-initiator-utils.i386 0:
[root@localhost ~]# rpm -qf /var/lock/iscsi
[root@localhost ~]# rpm -qf /var/lib/iscsi

Comment 14 errata-xmlrpc 2009-01-20 20:57:54 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.