Red Hat Bugzilla – Bug 1134737
Improve SELinux sosreport/foreman-debug
Last modified: 2017-02-23 16:01:10 EST
We already added some information to foreman-debug (grep AVC and audit2allow). Unfortunately when selinux interfaces are not installed and generated, -R option can fail: COMMAND> audit2allow -R < /var/log/audit/audit.log could not open interface info [/var/lib/sepolgen/interface_info] I am going to fix this and add few more selinux related information to the tarball. PM: Please ack this for 6.0.4, I need this to improve SELinux bug reports. I am missing some important bits. Thanks.
Upstream patch is pending: http://projects.theforeman.org/issues/7098 https://github.com/theforeman/foreman/pull/1691 Please review.
Moving to POST since upstream bug http://projects.theforeman.org/issues/7098 has been closed ------------- Lukas Zapletal Applied in changeset commit:80cc99f4b0d0af0afdba8def1256b37c4862430f.
Jason, this bug was initially filed on SELinux component, but it was an improvement in our foreman-debug script. Changed the component to Packaging, this needs to be cherry-picked. For SELinux bugs (policy) I am providing the pull requests directly to you. But this is different one. Thanks.
Upstream bug assigned to lzap@redhat.com
Verified on: Satellite-6.1.0-RHEL-7-20150303.0 Steps do verify: [root@sat6 ~]# mkdir debug [root@sat6 ~]# foreman-debug -d debug/ [root@sat6 ~]# ls -l debug/ | grep selinux -rw-r--r--. 1 root root 76 Mar 9 12:10 selinux_audit2allow -rw-r--r--. 1 root root 23308 Mar 9 12:10 selinux_booleans -rw-r--r--. 1 root root 3129 Mar 9 12:10 selinux_denials.log -rw-r--r--. 1 root root 627974 Mar 9 12:10 selinux_fcontext -rw-r--r--. 1 root root 3106 Mar 9 12:10 selinux_first_denials.log -rw-r--r--. 1 root root 5935 Mar 9 12:10 selinux_modules Also checked the contents of each file.
This bug is slated to be released with Satellite 6.1.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2015:1592