| Summary: | Targeted SELinux policy prohibits xend from starting | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | W. Michael Petullo <mike> | ||||||
| Component: | selinux-policy-targeted | Assignee: | Miroslav Grepl <mgrepl> | ||||||
| Status: | CLOSED ERRATA | QA Contact: | Ben Levenson <benl> | ||||||
| Severity: | unspecified | Docs Contact: | |||||||
| Priority: | unspecified | ||||||||
| Version: | 15 | CC: | dwalsh | ||||||
| Target Milestone: | --- | ||||||||
| Target Release: | --- | ||||||||
| Hardware: | Unspecified | ||||||||
| OS: | Unspecified | ||||||||
| Whiteboard: | |||||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||||
| Doc Text: | Story Points: | --- | |||||||
| Clone Of: | Environment: | ||||||||
| Last Closed: | 2011-05-30 21:52:25 UTC | Type: | --- | ||||||
| Regression: | --- | Mount Type: | --- | ||||||
| Documentation: | --- | CRM: | |||||||
| Verified Versions: | Category: | --- | |||||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||||
| Attachments: |
|
||||||||
Created attachment 500466 [details]
Audit log 2
Fixed in selinux-policy-3.9.16-25.fc15 I don't see a selinux-policy-3.9.16-25.fc15 build in Koji or anything in the Git f15 branch yet. Confirmed fixed in selinux-policy-3.9.16-26.fc15.noarch (probably -25.fc15 too, but I did not test that version). Thank you, Daniel. |
Created attachment 500465 [details] Audit log 1 Description of problem: The targeted SELinux policy prohibits xend from starting. Version-Release number of selected component (if applicable): xen-4.1.0-2.fc15.x86_64 selinux-policy-targeted-3.9.16-23.fc15.noarch How reproducible: Every time Steps to Reproduce: 1. Boot with SELinux enforcing its targeted policy 2. Start xend Actual results: Xend fails to start, as noted in the log below. Although xend fails to start everytime, the audit log cycles between two possible outputs each time I try to restart xend. These are attached as 1.log and 2.log. [2011-05-23 09:49:06 1238] ERROR (SrvDaemon:356) Exception starting xend (ord() expected a character, but string of length 0 found) Traceback (most recent call last): File "/usr/lib64/python2.7/site-packages/xen/xend/server/SrvDaemon.py", line 348, in run servers = SrvServer.create() File "/usr/lib64/python2.7/site-packages/xen/xend/server/SrvServer.py", line 258, in create root.putChild('xend', SrvRoot()) File "/usr/lib64/python2.7/site-packages/xen/xend/server/SrvRoot.py", line 40, in __init__ self.get(name) File "/usr/lib64/python2.7/site-packages/xen/web/SrvDir.py", line 84, in get val = val.getobj() File "/usr/lib64/python2.7/site-packages/xen/web/SrvDir.py", line 52, in getobj self.obj = klassobj() File "/usr/lib64/python2.7/site-packages/xen/xend/server/SrvNode.py", line 30, in __init__ self.xn = XendNode.instance() File "/usr/lib64/python2.7/site-packages/xen/xend/XendNode.py", line 1181, in instance inst = XendNode() File "/usr/lib64/python2.7/site-packages/xen/xend/XendNode.py", line 159, in __init__ self._init_PPCIs() File "/usr/lib64/python2.7/site-packages/xen/xend/XendNode.py", line 282, in _init_PPCIs for pci_dev in PciUtil.get_all_pci_devices(): File "/usr/lib64/python2.7/site-packages/xen/util/pci.py", line 475, in get_all_pci_devices return map(PciDevice, get_all_pci_dict()) File "/usr/lib64/python2.7/site-packages/xen/util/pci.py", line 696, in __init__ self.detect_dev_info() File "/usr/lib64/python2.7/site-packages/xen/util/pci.py", line 1061, in detect_dev_info pos = self.find_cap_offset(PCI_CAP_ID_EXP) File "/usr/lib64/python2.7/site-packages/xen/util/pci.py", line 942, in find_cap_offset id = ord(os.read(fd, 1)) TypeError: ord() expected a character, but string of length 0 found Expected results: Xend should start. Additional info: Setting SELinux to permissive mode allows xend to start. I have to restart it twice to get it to finally start. This is probably related to the comment about the two audit log outputs above.