Bug 490300

Summary: severe SELinux errors during shutdown
Product: [Fedora] Fedora Reporter: alauschke
Component: setroubleshootAssignee: Daniel Walsh <dwalsh>
Status: CLOSED WONTFIX QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: low    
Version: 10CC: dwalsh, ebenes, jdennis, mgrepl
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-12-18 09:01:28 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 517000    

Description alauschke 2009-03-14 23:44:53 UTC
Description of problem:
no clue where this comes from. During shutdown some problems with perl and SELinux.


Additional info:
As this was during shutdown I couldn't save it in a file, so I shot a picture with my digicam, see attached.

This stays for about ten seconds, and then quits.

This SELinux problem seems to be the origin of gconf and gconf-2 errors I get. Both of them started cropping up about a month ago at the same time. Several things in F9 don't give me access to them through Gnome and say that access has been denied (e. g. Evolution, DiskAnalyzer, Desktop sharing).

Sorry I cannot be more descriptive, but I really have no clue how this is generated.

Comment 1 Daniel Walsh 2009-03-16 15:00:50 UTC
You did not attach the photo.  You probaly can see the messages if you use dmesg.

dmesg | grep avc

Comment 2 alauschke 2009-03-16 16:48:56 UTC
I did. Is there a file size limit for uploads? My pictures from the digicam are big. How else can I provide the picture? Make smaller picture?

Comment 3 Daniel Walsh 2009-03-16 17:01:07 UTC
Do you have a site where you could put it and add a url link?

Comment 4 alauschke 2009-04-03 13:59:27 UTC
After upgrading to F10 the actual denial of access is gone. However, I still get:

www.lauschkeconsulting.com/SANY0090.JPG

And this one is a new popup during boot:
www.lauschkeconsulting.com/sany0047.jpg

I didn't have this with F9.

The two issues seem to be related somehow, I don't know how.

But, apart from these error messages, everything seems to work now on F10.

Comment 5 Daniel Walsh 2009-04-06 12:31:37 UTC
www.lauschkeconsulting.com/SANY0090.JPG
Not SElinux related

I am not sure what the second one is, but have you run a full yum update on the F10 system?

Comment 6 alauschke 2009-04-06 13:15:38 UTC
Obviously. Every morning.

Comment 7 Daniel Walsh 2009-04-06 13:28:04 UTC
I am not sure how your database got corrupted, Although we should probably allow for a better cleanuup.

If you want to get rid of this error, do the following as root

# service setroubleshoot stop
# echo > /var/lib/setroubleshoot/audit_listener_database.xml
# service setroubleshoot start

Comment 8 Daniel Walsh 2009-04-06 13:30:39 UTC
John, 

Currently the code raises an exception when this happens,  I want to just change it to a log, and return the first match.  That way the delete code will succeed and at least remove the first dup.  Otherwise the user has no way of cleaning up his database, which was probably corrupted by a bug in one of the previous versions of setroubleshoot.

What do you think?

Comment 9 alauschke 2009-04-10 15:49:27 UTC
Did not solve the problem (comment 7). Still same error-messages during shut-down.

Comment 10 alauschke 2009-04-10 15:54:28 UTC
Error message after submitting the 3rd step (service setroubleshoot start):

xml:2: parser error : Start tag expected, '<' not found

and then a ^ below that.

Comment 11 Daniel Walsh 2009-04-11 11:25:24 UTC
is /var/lib/setroubleshoot/audit_listener_database.xml

and empty file?

If not, make it one.

cat /dev/null > /var/lib/setroubleshoot/audit_listener_database.xml

Comment 13 Bug Zapper 2009-11-18 09:55:03 UTC
This message is a reminder that Fedora 10 is nearing its end of life.
Approximately 30 (thirty) days from now Fedora will stop maintaining
and issuing updates for Fedora 10.  It is Fedora's policy to close all
bug reports from releases that are no longer maintained.  At that time
this bug will be closed as WONTFIX if it remains open with a Fedora 
'version' of '10'.

Package Maintainer: If you wish for this bug to remain open because you
plan to fix it in a currently maintained version, simply change the 'version' 
to a later Fedora version prior to Fedora 10's end of life.

Bug Reporter: Thank you for reporting this issue and we are sorry that 
we may not be able to fix it before Fedora 10 is end of life.  If you 
would still like to see this bug fixed and are able to reproduce it 
against a later version of Fedora please change the 'version' of this 
bug to the applicable version.  If you are unable to change the version, 
please add a comment here and someone will do it for you.

Although we aim to fix as many bugs as possible during every release's 
lifetime, sometimes those efforts are overtaken by events.  Often a 
more recent Fedora release includes newer upstream software that fixes 
bugs or makes them obsolete.

The process we are following is described here: 
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Comment 14 Bug Zapper 2009-12-18 09:01:28 UTC
Fedora 10 changed to end-of-life (EOL) status on 2009-12-17. Fedora 10 is 
no longer maintained, which means that it will not receive any further 
security or bug fix updates. As a result we are closing this bug.

If you can reproduce this bug against a currently maintained version of 
Fedora please feel free to reopen this bug against that version.

Thank you for reporting this bug and we are sorry it could not be fixed.

Comment 15 Red Hat Bugzilla 2023-09-14 01:15:34 UTC
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 1000 days