Bug 988855

Summary:

semanage fails in %post when installing a plugin

Product:

[Retired] oVirt

Reporter:

Mike Burns <mburns>

Component:

ovirt-node

Assignee:

Joey Boggs <jboggs>

Status:

CLOSED CURRENTRELEASE

QA Contact:

Severity:

medium

Docs Contact:

Priority:

medium

Version:

unspecified

CC:

acathrow, fdeutsch, jboggs, mburns, mgoldboi, ovirt-bugs, ovirt-maint, yeylon

Target Milestone:

---

Target Release:

---

Hardware:

Unspecified

OS:

Unspecified

Whiteboard:

Fixed In Version:

Doc Type:

Bug Fix

Doc Text:

Story Points:

---

Clone Of:

Environment:

Last Closed:

2013-11-28 13:49:13 UTC

Type:

Bug

Regression:

---

Mount Type:

---

Documentation:

---

CRM:

Verified Versions:

Category:

---

oVirt Team:

---

RHEL 7.3 requirements from Atomic Host:

Cloudforms Team:

---

Target Upstream Version:

Embargoed:

Bug Depends On:

994131

Bug Blocks:

Attachments:

Description	Flags
screenshot	none

Description Mike Burns 2013-07-26 14:53:39 UTC

Description of problem:
ovirt-node-plugin-vdsm sets a number of selinux rules (virt_use_nfs, virt_use_sanlock, etc).  When running edit-node, these are not getting set correctly.

Version-Release number of selected component (if applicable):
3.0.0

How reproducible:
always

Steps to Reproduce:
1.take base image and inject ovirt-node-plugin-vdsm
2.boot the image
3.check virt_use_nfs virt_use_sanlock sanlock_use_nfs booleans

Actual results:
all are off

Expected results:
all are on

Additional info:

Comment 1 Joey Boggs 2013-08-06 14:11:57 UTC

Created attachment 783361 [details]
screenshot

Comment 2 Joey Boggs 2013-08-06 14:45:24 UTC

These are all on by default since we turn them on in ovirt-node-selinux.

It fails in edit-node since we disable selinux and setsebool won't run.

A workaround is:

Write the boolean into /etc/selinux/targeted/modules/active/booleans.local

virt_use_nfs=1

I checked with selinux folks and that should work fine but filed a bz to add an offline option to make this easier.

Comment 3 Fabian Deutsch 2013-11-28 13:49:13 UTC

This has been addressed with th selinux specific sub-package.