Bug 863252
Summary: | katello-selinux-enable throws error | ||
---|---|---|---|
Product: | Red Hat Satellite | Reporter: | Chandrasekar Kannan <ckannan> |
Component: | SELinux | Assignee: | Justin Sherrill <jsherril> |
Status: | CLOSED ERRATA | QA Contact: | Og Maciel <omaciel> |
Severity: | high | Docs Contact: | |
Priority: | unspecified | ||
Version: | 6.0.0 | CC: | asettle, benl, cpelland, dmacpher, inecas, mmccune, msuchy, omaciel |
Target Milestone: | Unspecified | Keywords: | Triaged |
Target Release: | Unused | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: |
A script failure existed in the RPM package of katello-selinux. This bug fix removes simple and MLS from the script katello-selinux-enable. The RPM package installs correctly.
|
Story Points: | --- |
Clone Of: | Environment: | ||
Last Closed: | 2012-12-04 19:56:58 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Chandrasekar Kannan
2012-10-04 20:04:58 UTC
Tested a non-upgrade scenario and it worked fine. Testing an upgrade scenario now. I was not able to reproduce this by upgrading from SE 1.0 to 1.1 with selinux enabled. Nor by running selinux-enable Installing : quartz-2.1.5-4.el6cf.noarch 59/93 Updating : candlepin-0.7.8-1.el6cf.noarch 60/93 Updating : candlepin-tomcat6-0.7.8-1.el6cf.noarch 61/93 Installing : candlepin-selinux-0.7.8-1.el6cf.noarch 62/93 Installing : rubygem-apipie-rails-0.0.11-2.el6cf.noarch 63/93 Updating : katello-common-1.1.12-12.el6cf.noarch 64/93 warning: /etc/httpd/conf.d/katello.conf created as /etc/httpd/conf.d/katello.conf.rpmnew warning: /etc/katello/katello.yml created as /etc/katello/katello.yml.rpmnew warning: /etc/katello/thin.yml created as /etc/katello/thin.yml.rpmnew Updating : katello-selinux-1.1.1-1.el6cf.noarch 65/93 Updating : katello-glue-candlepin-1.1.12-12.el6cf.noarch 66/93 Updating : katello-glue-pulp-1.1.12-12.el6cf.noarch 67/93 Updating : katello-1.1.12-12.el6cf.noarch 68/93 Updating : katello-all-1.1.12-12.el6cf.noarch 69/93 Updating : 1:rubygem-actionpack-3.0.10-10.el6cf.noarch 70/93 Updating : rubygem-mail-2.3.0-3.el6cf.noarch 71/93 Cleanup : katello-all-0.1.311-1.el6_2.noarch <SNIP> Works with katello-selinux-enable too: [root@dhcp77-152 ~]# katello-selinux-enable [root@dhcp77-152 ~]# Can you provide any other steps to reproduce? no .. I don't have any other steps to reproduce at this point. I'm trying the work around mentioned in this bug https://bugzilla.redhat.com/show_bug.cgi?id=511067 ... This appears to be fixed in: https://github.com/Katello/katello/commit/508a1e5912e0c3ea3347af7cb44f69034006636f or at least making that change appears to fix katello-selinux-enable. From what i understand that makes sense as the error is occuring when installing the selinux module for mls mode (targeted works fine). Mirek, Do you see any issues with bringing this into System engine 1.1? Since we don't support mls i would think it would be ok. Can you confirm? Thanks, -Justin I see no issues in cherry picking that commit to 1.1. But I do not think it is cause of this error. I would really like to get login on machine where it reproduces or get deterministic reproducer. I got hands on reproducer and I agree that patch from #4 is correct fix. TPS is no longer showing this issue, marking as VERIFIED: * candlepin-0.7.8.1-1.el6cf.noarch * candlepin-selinux-0.7.8.1-1.el6cf.noarch * candlepin-tomcat6-0.7.8.1-1.el6cf.noarch * katello-1.1.12-17.el6cf.noarch * katello-all-1.1.12-17.el6cf.noarch * katello-candlepin-cert-key-pair-1.0-1.noarch * katello-certs-tools-1.1.8-1.el6cf.noarch * katello-cli-1.1.8-9.el6cf.noarch * katello-cli-common-1.1.8-9.el6cf.noarch * katello-common-1.1.12-17.el6cf.noarch * katello-configure-1.1.9-8.el6cf.noarch * katello-glue-candlepin-1.1.12-17.el6cf.noarch * katello-glue-pulp-1.1.12-17.el6cf.noarch * katello-qpid-broker-key-pair-1.0-1.noarch * katello-qpid-client-key-pair-1.0-1.noarch * katello-selinux-1.1.1-2.el6cf.noarch * pulp-1.1.14-1.el6cf.noarch * pulp-common-1.1.14-1.el6cf.noarch * pulp-selinux-server-1.1.14-1.el6cf.noarch Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. http://rhn.redhat.com/errata/RHSA-2012-1543.html |