Bug 486743
| Summary: | satellite install, selinux denials httpd | ||
|---|---|---|---|
| Product: | Red Hat Satellite 5 | Reporter: | wes hayutin <whayutin> |
| Component: | Installer | Assignee: | Jan Pazdziora <jpazdziora> |
| Status: | CLOSED NOTABUG | QA Contact: | wes hayutin <whayutin> |
| Severity: | medium | Docs Contact: | |
| Priority: | low | ||
| Version: | 530 | CC: | bperkins |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| URL: | na | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2009-03-16 14:01:19 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
| Bug Depends On: | |||
| Bug Blocks: | 457079 | ||
What did you do after that installation? After the installer said * Deploying configuration files. * Update configuration in database. * Setting up Cobbler.. * Restarting services. Installation complete. Visit https://your-satellite.redhat.com to create the RHN Satellite administrator account. what other steps did you make? Generally, these look like leaked descriptors from whatever automation tool you are using. Please provide info about how exactly you run those installations. Again, we spoke about screen. If access to the script is necessary.. please see $SVNDIR/qa/automation/sat-install-script/install-sat.sh Wes confirmed that the installation was run under screen and that re-running the installation without screen does not generate the AVC denials. So currently it looks like leaked file descriptor in screen. The same problem as bug 486742: screen possibly leaking descriptors was leading to AVC denials. Closing as NOTABUG as it's not strictly speaking a duplicate -- the cause was the same but the symptoms showed in different programs. |
Description of problem: satellite install, selinux denials httpd Satellite-5.3.0-RHEL5-re20090220.1-i386-embedded-oracle.iso clear audit log install latest satellite iso check audit log ype=AVC msg=audit(1235187505.248:404): avc: denied { read write } for pid=10165 comm="httpd" path="socket:[7018]" dev=sockfs ino=7018 scontext=root:system_r:httpd_t:s0 tcontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket type=AVC msg=audit(1235187505.248:404): avc: denied { read write } for pid=10165 comm="httpd" path="socket:[7018]" dev=sockfs ino=7018 scontext=root:system_r:httpd_t:s0 tcontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket type=AVC msg=audit(1235187505.248:404): avc: denied { read write } for pid=10165 comm="httpd" path="socket:[7020]" dev=sockfs ino=7020 scontext=root:system_r:httpd_t:s0 tcontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tclass=unix_stream_socket