Bug 619014

Summary:	SWnightly (from 2010-07-27) produces a lot of AVCs when restarting on F13
Product:	[Community] Spacewalk	Reporter:	Jan Hutař <jhutar>
Component:	Server	Assignee:	Jan Pazdziora (Red Hat) <jpazdziora>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Red Hat Satellite QA List <satqe-list>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	1.2	CC:	cperry, fybanez, jkastner, jpazdziora, psklenar, slukasik
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:	spacewalk-monitoring-selinux-1.2.1-1	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2010-11-19 16:16:29 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	623772

Comment 1 Jan Hutař 2010-07-29 09:46:09 UTC

Hello,
using:

# rpm -qa | grep -i selinux | sort
libselinux-2.0.90-5.fc13.x86_64
libselinux-devel-2.0.90-5.fc13.x86_64
libselinux-python-2.0.90-5.fc13.x86_64
libselinux-utils-2.0.90-5.fc13.x86_64
oracle-instantclient-selinux-10.2-18.fc13.noarch
oracle-instantclient-sqlplus-selinux-10.2-18.fc13.noarch
oracle-nofcontext-selinux-0.1-23.15.fc13.noarch
oracle-xe-selinux-10.2-17.fc13.noarch
osa-dispatcher-selinux-5.9.37-1.fc13.noarch
selinux-policy-3.7.19-39.fc13.noarch
selinux-policy-targeted-3.7.19-39.fc13.noarch
spacewalk-monitoring-selinux-1.1.1-1.fc13.noarch
spacewalk-selinux-1.1.1-1.fc13.noarch
# rpm -qa | grep schema
spacewalk-schema-1.1.21-1.fc13.noarch
# rpm -q fedora-release
fedora-release-13-1.noarch

this really looks like restart is causing this:

# cat /var/log/audit/audit.log | audit2allow 
# rhn-satellite restart
[...]
# cat /var/log/audit/audit.log | audit2allow 


#============= spacewalk_monitoring_t ==============
allow spacewalk_monitoring_t usr_t:file open;

Comment 9 Jan Pazdziora (Red Hat) 2010-10-04 15:53:21 UTC

Taking.

Comment 10 Jan Pazdziora (Red Hat) 2010-10-04 16:20:31 UTC

Fixed in Spacewalk master, 257376e6b9a18ac17ac25f2249e95e4c3fa786f0.

Tagged ad built as spacewalk-monitoring-selinux-1.2.1-1.

Comment 11 Jan Pazdziora (Red Hat) 2010-10-04 16:26:39 UTC

*** Bug 630833 has been marked as a duplicate of this bug. ***

Comment 12 Jan Pazdziora (Red Hat) 2010-10-27 13:12:56 UTC

*** Bug 636365 has been marked as a duplicate of this bug. ***

Comment 13 Jan Pazdziora (Red Hat) 2010-11-15 19:30:39 UTC

Moving ON_QA.

Please use the Spacewalk 1.2 release candidate yum repo at

http://koji.spacewalkproject.org/spacewalk/split/spacewalk-5E/server/spacewalk-5E-1.2/$basearch/os
http://koji.spacewalkproject.org/spacewalk/split/spacewalk-f12/server/spacewalk-f12-1.2/$basearch/os
http://koji.spacewalkproject.org/spacewalk/split/spacewalk-f13/server/spacewalk-f13-1.2/$basearch/os
http://koji.spacewalkproject.org/spacewalk/split/spacewalk-f14/server/spacewalk-f14-1.2/$basearch/os

(depending on your OS) to verify the bugzilla.

Comment 15 Jan Pazdziora (Red Hat) 2010-11-19 16:16:29 UTC

With Spacewalk 1.2 released, marking as CLOSED CURRENTRELEASE.

https://www.redhat.com/archives/spacewalk-list/2010-November/msg00111.html