Bug 976635

Summary: Managedsave/save failed with unable to execute QEMU command 'getfd'
Product: Red Hat Enterprise Linux 6 Reporter: zhenfeng wang <zhwang>
Component: libvirtAssignee: Peter Krempa <pkrempa>
Status: CLOSED WONTFIX QA Contact: Virtualization Bugs <virt-bugs>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.4CC: acathrow, ajia, berrange, dallan, dyuan, gsun, honzhang, jdenemar, michal.skrivanek, mzhan, ydu
Target Milestone: rcKeywords: Upstream
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 976632 Environment:
Last Closed: 2014-04-04 20:57:47 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 976632    
Bug Blocks:    

Comment 3 Dave Allan 2013-06-27 08:31:38 UTC
Dan, does OpenStack set relabel='no' ?

Comment 4 Daniel Berrangé 2013-06-27 09:42:25 UTC
No, openstack relies on completely dynamic selinux labelling. This bug doesn't seem to be related to openstack in any case - the initial report says the reporter is manually adding the static selinux label

Comment 5 Dave Allan 2013-06-27 10:08:06 UTC
(In reply to Daniel Berrange from comment #4)
> No, openstack relies on completely dynamic selinux labelling. This bug
> doesn't seem to be related to openstack in any case - the initial report
> says the reporter is manually adding the static selinux label

Indeed, it's not related to OpenStack, I just wanted to make sure that any changes we make as a result of it won't affect OpenStack.  (I have the same question about oVirt.)

Comment 6 Michal Skrivanek 2013-07-01 13:14:45 UTC
should not be related to oVirt either, as far as I know

Comment 8 Peter Krempa 2013-07-08 13:14:54 UTC
Fixed upstream by:
commit 2ce63c161111c6d813130f850639d1548d80c3fe
Author: Peter Krempa <pkrempa>
Date:   Tue Jul 2 18:34:58 2013 +0200

    selinux: Always generate imagelabel
    
    The imagelabel SELinux label was only generated when relabeling was
    enabled. This prohibited labeling of files created by libvirt that need
    to be labeled even if relabeling is turned off.
    
    The only codepath this change has direct impact on is labeling of FDs
    passed to qemu which is always safe in current state.

Comment 10 Jiri Denemark 2013-07-08 14:31:40 UTC
We decided not to rebase libvirt in RHEL 6.5 to avoid stability issues
we faced in 6.4. This bug has already been fixed upstream but it is
considered unsuitable for backporting to RHEL 6.5 because at least one
of the following conditions is met:

- this bug requires new API(s), which we cannot introduce without
  rebasing libvirt
- the patches required to address this bug are complex or invasive
  causing the backport to be too risky
- this bug is not important enough to justify backporting non-trivial
  patches for it

Thus I'm pushing this bug to RHEL 6.6 (and setting Upstream keyword to
indicate we have patches upstream) for now. If you don't agree with
this resolution, please, give us reasons which you think are strong
enough for us to reevaluate the decision not to backport patches for
this bug.

Comment 13 RHEL Program Management 2014-04-04 20:57:47 UTC
Development Management has reviewed and declined this request.
You may appeal this decision by reopening this request.