Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1113578

Summary: selinux error when installing Qpid bits
Product: [Retired] Pulp Reporter: Brian Bouterse <bmbouter>
Component: z_otherAssignee: Brian Bouterse <bmbouter>
Status: CLOSED CURRENTRELEASE QA Contact: Preethi Thomas <pthomas>
Severity: unspecified Docs Contact:
Priority: medium    
Version: 2.4 BetaCC: dpierce, pthomas, skarmark
Target Milestone: ---Keywords: Triaged
Target Release: 2.4.0   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-08-09 06:56:52 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
stdout and stderr output of uninstalling qpid packages none

Description Brian Bouterse 2014-06-26 12:57:55 UTC
When installing the package qpid-cpp-0.26-3.el6 from the mcpierce repo, you will receive the following error message:

The error Non-fatal POSTIN scriptlet failure is the result of an SElinux policy that prevents executables from >running in the /tmp directory. Even though the directory and unpacked files may have execute permissions, the >system prevents the executables from running.

This prevents the qpid user and group from being created, which would prevent normal operaiton of Qpid. The root cause has been identified, and Darryl is fixing it. This BZ is intended for the following activities:

1. Track the release of a fixed version in Koji
2. Test that new release resolves the issue
3. Add the following tags to the following NVRs

Tags to Add:
- pulp-2.4-beta-rhel6
- pulp-2.4-testing-rhel6

NVRs
- python-qpid-0.26-1.el6
- qpid-qmf-0.24-17.el6
- qpid-cpp-0.26-3.el6

Comment 1 Darryl L. Pierce 2014-07-07 14:08:32 UTC
This bug is fixed the in the 0.26-4 release of qpid-cpp for EL6.

Comment 2 Brian Bouterse 2014-07-07 14:58:41 UTC
Moving it to NEW because there is some Koji work to be done with the Pulp targets before it can go to MODIFIED.

Comment 3 Brian Bouterse 2014-07-08 14:40:38 UTC
I verified that the 0.26-4 release of qpid-cpp for EL6 installs without any "Non-fatal POSTIN scriptlet failure" error messages reported. I verified the test system had selinux enabled because sestatus reported:

SELinux status:                 enabled
SELinuxfs mount:                /selinux
Current mode:                   enforcing
Mode from config file:          enforcing
Policy version:                 24
Policy from config file:        targeted

Now I'll verify the koji configuration...

Comment 4 Brian Bouterse 2014-07-08 15:09:41 UTC
Correction, there is still a problem, but only for the uninstall. The install no longer shows the scriptlet failure, but when uninstalling the packages I see:

Non-fatal POSTUN scriptlet failure in rpm package qpid-cpp-server

Comment 5 Darryl L. Pierce 2014-07-08 19:20:15 UTC
This should be fixed in the r6 release. The same thing comes up with proton-c as well due to the comment showing up in the postun script. Those should be fixed by COB today and available in updates-testing.

Comment 6 Brian Bouterse 2014-07-08 20:26:58 UTC
Created attachment 916550 [details]
stdout and stderr output of uninstalling qpid packages

Comment 7 Brian Bouterse 2014-07-11 19:54:05 UTC
An updated set of NVRs for these qpid packages have been built in Koji. We are told the new versions do not show these SElinux issues. Pulp was updated to use the new NVR with pulp/pulp PR 1040 (see [0])

Once committed, Pulp's build environments were updated to the latest using this command:

./builder.py --update-tag-package-list 2.4 beta

Because of this the Pulp repo (v2) will contain these Qpid packages for EL6. Thus by adding Pulp's repo before installing Qpid, you'll get Qpid v0.26. This is being included as of build 24.

[0]:  https://github.com/pulp/pulp/pull/1040

Comment 8 Brian Bouterse 2014-07-11 20:38:18 UTC
The updated Qpid packages are included with Pulp 2.4.0-0.24.beta

Comment 9 Brian Bouterse 2014-07-11 21:00:51 UTC
To verify this bug you should verify steps 4 and 6:

1. Start with an EL6 machine with selinux enabled that does NOT have Qpid installed
2. Add the pulp beta repo
3. yum install python-gofer-qpid python-qpid python-qpid-qmf qpid-cpp-client qpid-cpp-server qpid-cpp-server-store qpid-qmf qpid-tools
4. Verify that there are no errors that occur during installation
5. yum remove python-gofer-qpid python-qpid python-qpid-qmf qpid-cpp-client qpid-cpp-server qpid-cpp-server-store qpid-qmf qpid-tools
6. Verify that there are no errors that occur during removal

Comment 10 Preethi Thomas 2014-07-14 15:29:39 UTC
Failing 

Looks like there is still an error with removing qpid-cpp-server-store

[root@cloud-qe-14 ~]# yum remove python-gofer-qpid python-qpid python-qpid-qmf qpid-cpp-client qpid-cpp-server qpid-cpp-server-store qpid-qmf qpid-tools
Loaded plugins: product-id, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package python-gofer-qpid.noarch 0:1.3.0-1.el6 will be erased
---> Package python-qpid.noarch 0:0.26-2.el6 will be erased
---> Package python-qpid-qmf.x86_64 0:0.26-2.el6 will be erased
---> Package qpid-cpp-client.x86_64 0:0.26-7.el6 will be erased
---> Package qpid-cpp-server.x86_64 0:0.26-7.el6 will be erased
---> Package qpid-cpp-server-store.x86_64 0:0.26-7.el6 will be erased
---> Package qpid-qmf.x86_64 0:0.26-2.el6 will be erased
---> Package qpid-tools.x86_64 0:0.26-7.el6 will be erased
--> Finished Dependency Resolution
 
Dependencies Resolved
 
================================================================================
 Package                   Arch       Version           Repository         Size
================================================================================
Removing:
 python-gofer-qpid         noarch     1.3.0-1.el6       @pulp-v2-beta      75 k
 python-qpid               noarch     0.26-2.el6        @pulp-v2-beta     1.1 M
 python-qpid-qmf           x86_64     0.26-2.el6        @pulp-v2-beta     794 k
 qpid-cpp-client           x86_64     0.26-7.el6        @pulp-v2-beta     4.0 M
 qpid-cpp-server           x86_64     0.26-7.el6        @pulp-v2-beta     4.9 M
 qpid-cpp-server-store     x86_64     0.26-7.el6        @pulp-v2-beta     823 k
 qpid-qmf                  x86_64     0.26-2.el6        @pulp-v2-beta     515 k
 qpid-tools                x86_64     0.26-7.el6        @pulp-v2-beta     116 k
 
Transaction Summary
================================================================================
Remove        8 Package(s)
 
Installed size: 12 M
Is this ok [y/N]: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing    : qpid-tools-0.26-7.el6.x86_64                                 1/8
  Erasing    : python-gofer-qpid-1.3.0-1.el6.noarch                         2/8
  Erasing    : qpid-qmf-0.26-2.el6.x86_64                                   3/8
  Erasing    : python-qpid-qmf-0.26-2.el6.x86_64                            4/8
  Erasing    : qpid-cpp-server-store-0.26-7.el6.x86_64                      5/8
Non-fatal POSTUN scriptlet failure in rpm package qpid-cpp-server-store
  Erasing    : python-qpid-0.26-2.el6.noarch                                6/8
/sbin/ldconfig: relative path `0' used to build cache
warning: %postun(qpid-cpp-server-store-0.26-7.el6.x86_64) scriptlet failed, exit status 1
  Erasing    : qpid-cpp-server-0.26-7.el6.x86_64                            7/8
warning: /etc/qpid/qpidd.conf saved as /etc/qpid/qpidd.conf.rpmsave
  Erasing    : qpid-cpp-client-0.26-7.el6.x86_64                            8/8
  Verifying  : python-gofer-qpid-1.3.0-1.el6.noarch                         1/8
  Verifying  : python-qpid-qmf-0.26-2.el6.x86_64                            2/8
  Verifying  : qpid-cpp-server-0.26-7.el6.x86_64                            3/8
  Verifying  : qpid-cpp-server-store-0.26-7.el6.x86_64                      4/8
  Verifying  : python-qpid-0.26-2.el6.noarch                                5/8
  Verifying  : qpid-qmf-0.26-2.el6.x86_64                                   6/8
  Verifying  : qpid-cpp-client-0.26-7.el6.x86_64                            7/8
  Verifying  : qpid-tools-0.26-7.el6.x86_64                                 8/8
 
Removed:
  python-gofer-qpid.noarch 0:1.3.0-1.el6                                        
  python-qpid.noarch 0:0.26-2.el6                                              
  python-qpid-qmf.x86_64 0:0.26-2.el6                                          
  qpid-cpp-client.x86_64 0:0.26-7.el6                                          
  qpid-cpp-server.x86_64 0:0.26-7.el6                                          
  qpid-cpp-server-store.x86_64 0:0.26-7.el6                                    
  qpid-qmf.x86_64 0:0.26-2.el6                                                  
  qpid-tools.x86_64 0:0.26-7.el6                                                
 
Complete!
[root@cloud-qe-14 ~]#

Comment 11 Darryl L. Pierce 2014-07-14 16:16:03 UTC
There was a package commented out in the space after qpid-cpp-server-store in the specfile that got pulled into the postun script. It's removed with this updated SRPM:

  http://repos.fedorapeople.org/repos/mcpierce/qpid-cpp/epel-6/SRPMS/qpid-cpp-0.26-8.el6.src.rpm

Comment 12 Brian Bouterse 2014-07-15 13:04:49 UTC
jsherrill built this SRPM, and I tested the RPMs. I did not see the selinux errors! This PR updates the qpid-cpp NVR that Pulp uses so the next beta release will include this fix.

https://github.com/pulp/pulp/pull/1041

Comment 13 Brian Bouterse 2014-07-15 13:14:44 UTC
I merged the reviewed PR into pulp-2.4, and then merged pulp-2.4 -> master. I also updated the pulp-2.4-beta-rhel6-build environment in koji so that it is current.

Comment 14 Preethi Thomas 2014-07-22 05:30:59 UTC
verified

verified

[root@qe-blade-03 certs]# yum remove python-gofer-qpid python-qpid python-qpid-qmf qpid-cpp-client qpid-cpp-server qpid-cpp-server-store qpid-qmf qpid-tools
Loaded plugins: product-id, security, subscription-manager
This system is not registered to Red Hat Subscription Management. You can use subscription-manager to register.
Setting up Remove Process
Resolving Dependencies
--> Running transaction check
---> Package python-gofer-qpid.noarch 0:1.3.0-1.el6 will be erased
--> Processing Dependency: python-gofer-qpid >= 1.3.0 for package: pulp-server-2.4.0-0.25.beta.el6.noarch
---> Package python-qpid.noarch 0:0.26-2.el6 will be erased
---> Package python-qpid-qmf.x86_64 0:0.26-2.el6 will be erased
---> Package qpid-cpp-client.x86_64 0:0.26-8.el6 will be erased
---> Package qpid-cpp-server.x86_64 0:0.26-8.el6 will be erased
---> Package qpid-cpp-server-store.x86_64 0:0.26-8.el6 will be erased
---> Package qpid-qmf.x86_64 0:0.26-2.el6 will be erased
---> Package qpid-tools.x86_64 0:0.26-8.el6 will be erased
--> Running transaction check
---> Package pulp-server.noarch 0:2.4.0-0.25.beta.el6 will be erased
--> Processing Dependency: pulp-server = 2.4.0 for package: pulp-rpm-plugins-2.4.0-0.25.beta.el6.noarch
--> Processing Dependency: pulp-server = 2.4.0 for package: pulp-puppet-plugins-2.4.0-0.25.beta.el6.noarch
--> Running transaction check
---> Package pulp-puppet-plugins.noarch 0:2.4.0-0.25.beta.el6 will be erased
---> Package pulp-rpm-plugins.noarch 0:2.4.0-0.25.beta.el6 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package                 Arch     Version                 Repository       Size
================================================================================
Removing:
 python-gofer-qpid       noarch   1.3.0-1.el6             @pulp-v2-beta    75 k
 python-qpid             noarch   0.26-2.el6              @pulp-v2-beta   1.1 M
 python-qpid-qmf         x86_64   0.26-2.el6              @pulp-v2-beta   794 k
 qpid-cpp-client         x86_64   0.26-8.el6              @pulp-v2-beta   4.0 M
 qpid-cpp-server         x86_64   0.26-8.el6              @pulp-v2-beta   4.9 M
 qpid-cpp-server-store   x86_64   0.26-8.el6              @pulp-v2-beta   823 k
 qpid-qmf                x86_64   0.26-2.el6              @pulp-v2-beta   515 k
 qpid-tools              x86_64   0.26-8.el6              @pulp-v2-beta   116 k
Removing for dependencies:
 pulp-puppet-plugins     noarch   2.4.0-0.25.beta.el6     @pulp-v2-beta   304 k
 pulp-rpm-plugins        noarch   2.4.0-0.25.beta.el6     @pulp-v2-beta   978 k
 pulp-server             noarch   2.4.0-0.25.beta.el6     @pulp-v2-beta   2.7 M

Transaction Summary
================================================================================
Remove       11 Package(s)

Installed size: 16 M
Is this ok [y/N]: y
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Erasing    : qpid-tools-0.26-8.el6.x86_64                                1/11 
  Erasing    : pulp-rpm-plugins-2.4.0-0.25.beta.el6.noarch                 2/11 
  Erasing    : pulp-puppet-plugins-2.4.0-0.25.beta.el6.noarch              3/11 
  Erasing    : qpid-qmf-0.26-2.el6.x86_64                                  4/11 
  Erasing    : python-qpid-qmf-0.26-2.el6.x86_64                           5/11 
  Erasing    : qpid-cpp-server-store-0.26-8.el6.x86_64                     6/11 
  Erasing    : pulp-server-2.4.0-0.25.beta.el6.noarch                      7/11 
  Erasing    : python-gofer-qpid-1.3.0-1.el6.noarch                        8/11 
  Erasing    : qpid-cpp-server-0.26-8.el6.x86_64                           9/11 
warning: /etc/qpid/qpidd.conf saved as /etc/qpid/qpidd.conf.rpmsave
  Erasing    : python-qpid-0.26-2.el6.noarch                              10/11 
  Erasing    : qpid-cpp-client-0.26-8.el6.x86_64                          11/11 
  Verifying  : python-gofer-qpid-1.3.0-1.el6.noarch                        1/11 
  Verifying  : python-qpid-qmf-0.26-2.el6.x86_64                           2/11 
  Verifying  : pulp-puppet-plugins-2.4.0-0.25.beta.el6.noarch              3/11 
  Verifying  : pulp-rpm-plugins-2.4.0-0.25.beta.el6.noarch                 4/11 
  Verifying  : qpid-cpp-client-0.26-8.el6.x86_64                           5/11 
  Verifying  : pulp-server-2.4.0-0.25.beta.el6.noarch                      6/11 
  Verifying  : python-qpid-0.26-2.el6.noarch                               7/11 
  Verifying  : qpid-cpp-server-0.26-8.el6.x86_64                           8/11 
  Verifying  : qpid-cpp-server-store-0.26-8.el6.x86_64                     9/11 
  Verifying  : qpid-qmf-0.26-2.el6.x86_64                                 10/11 
  Verifying  : qpid-tools-0.26-8.el6.x86_64                               11/11 

Removed:
  python-gofer-qpid.noarch 0:1.3.0-1.el6                                        
  python-qpid.noarch 0:0.26-2.el6                                               
  python-qpid-qmf.x86_64 0:0.26-2.el6                                           
  qpid-cpp-client.x86_64 0:0.26-8.el6                                           
  qpid-cpp-server.x86_64 0:0.26-8.el6                                           
  qpid-cpp-server-store.x86_64 0:0.26-8.el6                                     
  qpid-qmf.x86_64 0:0.26-2.el6                                                  
  qpid-tools.x86_64 0:0.26-8.el6                                                

Dependency Removed:
  pulp-puppet-plugins.noarch 0:2.4.0-0.25.beta.el6                              
  pulp-rpm-plugins.noarch 0:2.4.0-0.25.beta.el6                                 
  pulp-server.noarch 0:2.4.0-0.25.beta.el6                                      

Complete!
[root@qe-blade-03 certs]#

Comment 15 Randy Barlow 2014-08-09 06:56:52 UTC
This has been fixed in Pulp 2.4.0-1.