Bug 584901
Summary: | Using VFS IMA with OpenAFS generates lots of log noise | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | Red Hat Enterprise Linux 6 | Reporter: | Bryn M. Reeves <bmr> | ||||||
Component: | kernel | Assignee: | Eric Paris <eparis> | ||||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | Filesystem QE <fs-qe> | ||||||
Severity: | high | Docs Contact: | |||||||
Priority: | high | ||||||||
Version: | 6.0 | CC: | arozansk, bhinson, bkozdemb, borgan, botsch, dejohnso, eguan, eparis, eric.williams, james.leddy, jasonmc, jedgecombe, ktdreyer, kzhang, marc.c.dionne, ralston, sbandodk, simon, stephan.wiesand, tao, yi.zou | ||||||
Target Milestone: | rc | ||||||||
Target Release: | --- | ||||||||
Hardware: | All | ||||||||
OS: | Linux | ||||||||
Whiteboard: | |||||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2010-11-11 15:48:41 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Bryn M. Reeves
2010-04-22 17:06:01 UTC
This request was evaluated by Red Hat Product Management for inclusion in a Red Hat Enterprise Linux major release. Product Management has requested further review of this request by Red Hat Engineering, for potential inclusion in a Red Hat Enterprise Linux Major release. This request is not yet committed for inclusion. Created attachment 408627 [details]
Patch which fixes IMA object lifetime thus making it work with AFS
*** Bug 585286 has been marked as a duplicate of this bug. *** I'm trying to test the attached patch on the kernel source from the 2.6.32-19.el6 SRPM (from ftp.redhat.com/pub/redhat/rhel/beta/6/source/SRPMS/), but it doesn't apply cleanly. A few hunks fail in fs/namei.c, and it looks like it's based on a different tree than the current SRPM - for instance the context lines have handle_truncate(), which doesn't exist in the version I'm looking at. I guess you may be working from something more recent than the published SRPM. Yes I am. Some of the patches that are needed to make this work are not in the -19 kernel :(. I'm going to try to find one of the old versions of the patch for you to test. Created attachment 409960 [details]
Same basic fix, hopefully applies to older RHEL6 kernels
That patch does apply cleanly on the -19 kernel, thanks. I haven't been able to complete the build and test yet, I'll post an update when I have. It's pretty clear from the code that this should take care of the issue for OpenAFS. BTW it would also be very nice to see this fixed in Fedora 12, where it has also been a problem, or a move to 2.6.33. I completed some tests and can confirm that as expected, IMA warnings are no longer an issue with the patch applied, tested with the current OpenAFS. Thanks I also had success with this patch and OpenAFS-1.5.74 (the current development release) + http://git.openafs.org/?p=openafs.git;a=commit;h=14195f0f48d52dd3a81c52c4a3bc2078857d0f86 . It even works with SELinux in enforcing mode once all the labels are right. This will be the basic setup for all further work with the beta here. Thanks for the patch, and for making this BZ public. Is it known yet if this patch will be the released version of EL6? I want to file a support request through our support account if not. The patch has been posted for review by the internal Red Hat kernel team. We have not yet committed to inclusion but we are pursuing the process for inclusion in EL6. I believe that comment #2 is still the 'official' position. Is there any update on the 'official' position on this patch? Had a look at the beta 2 kernel source and it doesn't look like this has made it in yet. Patch(es) available on kernel-2.6.32-42.el6 *** Bug 534113 has been marked as a duplicate of this bug. *** *** Bug 593329 has been marked as a duplicate of this bug. *** Since nobody has confirmed here, I'll just mention that I got a chance to test openafs with kernel-2.6.32-44.2 and I can confirm that the issue is indeed resolved. Red Hat Enterprise Linux 6.0 is now available and should resolve the problem described in this bug report. This report is therefore being closed with a resolution of CURRENTRELEASE. You may reopen this bug report if the solution does not work for you. *** Bug 589760 has been marked as a duplicate of this bug. *** |