Bug 815988
| Summary: | [abrt] setroubleshoot-server-3.1.9-1.fc17: __init__.py:49:seinfo:RuntimeError: Permission denied | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Flóki Pálsson <flokip> |
| Component: | setools | Assignee: | Chris PeBenito <cpebenito> |
| Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 17 | CC: | 19feet, alberto.fusari, cpebenito, dag.odenhall, dario.soto, drepper, dwalsh, dxklann, jonhon49, matthew.hooper, mgrepl, michel, mikhail.v.gavrilov, mishu, muggeh, reklov, rksomayaji, stefw, sysoutfran, tpeplt, troilimathieu, woodguy552010 |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Unspecified | ||
| Whiteboard: | abrt_hash:f39f263a6f1d5f01559053f6160e6ca2af25e872 | ||
| Fixed In Version: | setools-3.3.7-24.fc17 | Doc Type: | Bug Fix |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2012-05-04 22:57:35 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Flóki Pálsson
2012-04-24 23:52:42 UTC
Try run SELinux Troubleshoter Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) >Try run SELinux Troubleshoter
It shows up in bottom bar and disappears. No window.
Form terminal
[floki@F17rc4 ~]$ /usr/bin/sealert -b
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
File "/usr/bin/sealert", line 50, in <module>
from setroubleshoot.util import get_identity, load_plugins
File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
file_types = setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Permission denied
[floki@F17rc4 ~]$
as root
# /usr/bin/sealert -b
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
File "/usr/bin/sealert", line 50, in <module>
from setroubleshoot.util import get_identity, load_plugins
File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
file_types = setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Success
[root@F17rc4 ~]#
I clicked on "Selinux Troubleshooter" in the menu. Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) Clicked on the sealert icon in my notification area. Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) When starting SELinux Troubleshooter from the GNOME Shell. Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) *** Bug 816650 has been marked as a duplicate of this bug. *** Getting similar now in F18\Rawhide will I create new bug, or add here? This is actually an setools and kernel issue. But I will revert setools package until the kernel fix has been pushed. *** Bug 817125 has been marked as a duplicate of this bug. *** Just run SELinux Troubleshoter Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) VPN fails to work so tried to look in troubleshooter to see if this was the cause. Refused to work. Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) just run SELinux Troubleshoter Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) Nothing to say. Package: setroubleshoot-server-3.1.9-1.fc17 Architecture: i686 OS Release: Fedora release 17 (Beefy Miracle) I started the Selinux Troubleshooter, latest updates as of 30-04-2012 on fc17 Seems to skip gksu. Kernel is built from source with one changed setting the rest is fefora default (CONFIG_INTEL_IOMMU_DEFAULT_ON) Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) Trying to run sealert manually (without waiting for a SELinux alert) Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) When i run manually i get the following:
$ sealert
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
File "/usr/bin/sealert", line 50, in <module>
from setroubleshoot.util import get_identity, load_plugins
File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
file_types = setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Permission denied
Abrt pops up with this every time I log into KDE Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) Please revert your version of setools yum distro-sync setools I get no help from distro-sync. Name : setools Arch : x86_64 Version : 3.3.7 Release : 22.fc17 Size : 13 k Repo : fedora "No Packages marked for Distribution Synchronization" rpm -q setools setools-3.3.7-24.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/setools-3.3.7-24.fc17 I entered the command 'sudo sealert -l' at a bash shell prompt. Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) Works but in cli\gui get: # sealert WARNING: Policy would be downgraded from version 27 to 26 (then window opens) Package setools-3.3.7-24.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing setools-3.3.7-24.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-7191/setools-3.3.7-24.fc17 then log in and leave karma (feedback). Simply logging in after "yum update" and a reboot seems to have caused this error. Note that sealert was not running after receiving this error. Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) Additional note: I did not have plain "setools" package installed. I had setools-libs and setools-libs-python (this was originally a fresh F17 install). I uninstalled setools-libs and setools-libs-python (and all their dependants), then installed setools. I then installed selinux and re-installed the previously-removed dependants. Here's what yum chose for me: yum install setools - setools.x86_64 0:3.3.7-22.fc17 Dependencies: - bwidget.noarch 0:1.9.0-3.fc17 - setools-console.x86_64 0:3.3.7-22.fc17 - setools-gui.x86_64 0:3.3.7-22.fc17 - setools-libs.x86_64 0:3.3.7-22.fc17 - setools-libs-tcl.x86_64 0:3.3.7-22.fc17 yum install setroubleshoot policycoreutils-python policycoreutils-sandbox setroubleshoot-plugins setroubleshoot-server - policycoreutils-python.x86_64 0:2.1.11-6.fc17 - policycoreutils-sandbox.x86_64 0:2.1.11-6.fc17 - setroubleshoot.x86_64 0:3.1.9-1.fc17 - setroubleshoot-plugins.noarch 0:3.0.38-1.fc17 - setroubleshoot-server.x86_64 0:3.1.9-1.fc17 I then launched "SELinux Troubleshooter" from GNOME Shell and it did not crash. Oh, and I was then able to create and run a new VM using virt-manager. This happened without any intervention of a freshly-installed F17 system. Package: setroubleshoot-server-3.1.9-1.fc17 OS Release: Fedora release 17 (Beefy Miracle) setools-3.3.7-24.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report. Seems to be fixed now i just get the following when i start sealert from the cli: $ sealert WARNING: Policy would be downgraded from version 27 to 26. ** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GMountMountFlags' as enum when in fact it is of type 'GFlags' ** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GDriveStartFlags' as enum when in fact it is of type 'GFlags' ** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GSocketMsgFlags' as enum when in fact it is of type 'GFlags' Gtk-Message: Failed to load module "pk-gtk-module" Not sure if this is a problem that only happens after this upgrade and thus not happens when doing a clean install, either way i thought i'd mention it. |