Bug 894065

Summary: [F18] policydb error
Product: [Retired] oVirt Reporter: Fabian Deutsch <fdeutsch>
Component: ovirt-nodeAssignee: Fabian Deutsch <fdeutsch>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 3.2CC: acathrow, dwalsh, jboggs, mburns, mgoldboi, ovirt-bugs, ovirt-maint
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: ovirt-node-3.0.3 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2013-11-28 11:55:11 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Fabian Deutsch 2013-01-10 16:03:48 UTC
Description of problem:

Lock root account
Locking password for user root.
passwd: Success
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/sbin/semanage", line 25, in <module>
    import seobject
  File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module>
    import sepolicy
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 61, in <module>
    policy(policy_file)
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 54, in policy
    raise ValueError(_("Failed to read % policy file") % policy_file)
ValueError: unsupported format character 'p' (0x70) at index 17

Version-Release number of selected component (if applicable):
http://jenkins.ovirt.org/job/ovirt-node-iso-devel/1422/console

Comment 1 Fabian Deutsch 2013-01-21 17:13:19 UTC
  Installing: vdsm                         ##################### [556/582]ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/usr/bin/vdsm-tool", line 143, in <module>
    sys.exit(main())
  File "/usr/bin/vdsm-tool", line 125, in main
    load_modules()
  File "/usr/bin/vdsm-tool", line 74, in load_modules
    module = imp.load_module(mod_name, mod_fobj, mod_absp, mod_desc)
  File "/usr/lib64/python2.7/site-packages/vdsm/tool/seboolsetup.py", line 21, in <module>
    import seobject
  File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module>
    import sepolicy
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 61, in <module>
    policy(policy_file)
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 54, in policy
    raise ValueError(_("Failed to read % policy file") % policy_file)
ValueError: unsupported format character 'p' (0x70) at index 17
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/usr/bin/vdsm-tool", line 143, in <module>
    sys.exit(main())
  File "/usr/bin/vdsm-tool", line 125, in main
    load_modules()
  File "/usr/bin/vdsm-tool", line 74, in load_modules
    module = imp.load_module(mod_name, mod_fobj, mod_absp, mod_desc)
  File "/usr/lib64/python2.7/site-packages/vdsm/tool/seboolsetup.py", line 21, in <module>
    import seobject
  File "/usr/lib64/python2.7/site-packages/seobject.py", line 27, in <module>
    import sepolicy
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 61, in <module>
    policy(policy_file)
  File "/usr/lib64/python2.7/site-packages/sepolicy/__init__.py", line 54, in policy
    raise ValueError(_("Failed to read % policy file") % policy_file)
ValueError: unsupported format character 'p' (0x70) at index 17

Comment 2 Fabian Deutsch 2013-01-21 17:14:41 UTC
Dan,

can you say what problems we are seeing here?

First to me it seems as if there is an incorrect py format string:
    raise ValueError(_("Failed to read % policy file") % policy_file)
ValueError: unsupported format character 'p' (0x70) at index 17

But I can't say anything about:

ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.

Comment 3 Fabian Deutsch 2013-01-21 17:15:27 UTC
Snippet from comment #1 was take from http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/1506/console

Comment 4 Daniel Walsh 2013-01-21 21:26:05 UTC
What OS is this happening on?

rpm -q selinux-policy policycoreutils

Comment 5 Joey Boggs 2013-01-21 21:51:38 UTC
Fedora 18 based ovirt-node upstream of RHEV-H

policycoreutils-2.1.13-49.fc18.x86_64
selinux-policy-3.11.1-67.fc18.noarch

entire rpm manifest if needed: http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/1506/artifact/manifest-rpm.txt

Comment 8 Fabian Deutsch 2013-01-30 20:00:48 UTC
Mike,

I still see this errors in recent builds, e.g. http://jenkins.ovirt.org/view/ovirt_node/job/ovirt-node-iso-devel/1574/consoleFull , is there a way how Dan can gain access? Maybe we can sort this out w/ someone from the infra team ...

Comment 9 Mike Burns 2013-02-05 15:01:51 UTC
Defer this for now.  My fully updated F18 host will build with no issues.  I will work with the infra team to update the jenkins hosts there and see if we can solve this with a simple yum update.  Not something to block releasing an F18 node on though.

Comment 10 Mike Burns 2013-02-15 00:03:50 UTC
Still seeing this after yum update.  Trying to get access to the machine for Dan.

Comment 11 Fabian Deutsch 2013-05-07 10:46:21 UTC
This should be fixed - as much as it can - with teh new policy and the new selinux policy subpackage.

Comment 12 Fabian Deutsch 2013-05-07 10:50:11 UTC
http://gerrit.ovirt.org/#/c/14052/