Bug 782949

Summary: Numerous selinux alerts when using boinc
Product: [Fedora] Fedora Reporter: John Horne <john.horne>
Component: selinux-policyAssignee: Miroslav Grepl <mgrepl>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 15CC: bugzilla, dominick.grift, dwalsh, mgrepl, segg.gill, shakka.by
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: selinux-policy-3.9.16-51.fc15 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2012-02-22 02:01:16 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description John Horne 2012-01-18 22:27:56 UTC
Description of problem:
running boinc produces numerous selinux alerts ('top' shows setroubleshootd taking up to 70% cpu)

Version-Release number of selected component (if applicable):
selinux-policy-3.9.16-50.fc15.noarch

How reproducible:
Always

Steps to Reproduce:
1. Install boinc and configure
2. start the boinc_client
3.
  
Actual results:
Numerous selinux alerts slowing the machine

Expected results:
No alerts should be seen

Additional info:

Please see bug #770148

This bug was fixed for F16 but not in F15. I have two PCs running boinc, and both are now spending most of their time dealing with alerts. Both run F15.
Please backport the fix to F15.

Comment 1 Miroslav Grepl 2012-01-19 09:44:55 UTC
Fixed in selinux-policy-3.9.16-51.fc15

Comment 2 Fedora Update System 2012-01-19 10:24:54 UTC
selinux-policy-3.9.16-51.fc15 has been submitted as an update for Fedora 15.
https://admin.fedoraproject.org/updates/selinux-policy-3.9.16-51.fc15

Comment 3 Fedora Update System 2012-01-19 21:58:51 UTC
Package selinux-policy-3.9.16-51.fc15:
* should fix your issue,
* was pushed to the Fedora 15 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.9.16-51.fc15'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-0704/selinux-policy-3.9.16-51.fc15
then log in and leave karma (feedback).

Comment 4 John Horne 2012-01-20 00:50:12 UTC
Just updated both F15 PCs with new version of selinux-policy, and noticed that the CPU time and number of alerts dropped almost immediately.

Many thanks for fixing this so quickly. Please close the bug report.

Comment 5 Miroslav Grepl 2012-01-20 05:01:50 UTC
*** Bug 783309 has been marked as a duplicate of this bug. ***

Comment 6 Adri Verhoef 2012-01-20 16:39:27 UTC
After installing selinux-policy-3.9.16-51.fc15 the problem on this PC here (running F15) was gone.
Thanx for fixing this issue.

Comment 7 shakka.by 2012-01-21 09:46:02 UTC
After the update to selinux-policy-3.9.16-51.fc15 the problem was solved. 
Thanks.

Comment 8 Daniel Walsh 2012-01-24 16:04:11 UTC
Please update karma

Comment 9 Gilles J. Seguin 2012-01-31 22:46:13 UTC
please push to update
hard disk is filling up because of /var/log/messages
an update on << 2012-01-25 >>
more than an gigabytes per week.

Comment 10 Miroslav Grepl 2012-02-01 07:59:59 UTC
I need karma. But you can install the policy with the fix using

# su -c 'yum update --enablerepo=updates-testing selinux-policy-3.9.16-51.fc15'

Comment 11 Fedora Update System 2012-02-22 02:01:16 UTC
selinux-policy-3.9.16-51.fc15 has been pushed to the Fedora 15 stable repository.  If problems still persist, please make note of it in this bug report.