1134930 – ami-2e9d4446 6.6 x86_64 access us-east-1

Bug 1134930 - ami-2e9d4446 6.6 x86_64 access us-east-1

Summary: ami-2e9d4446 6.6 x86_64 access us-east-1

Keywords:
Status:	CLOSED NOTABUG
Alias:	None
Product:	Cloud Image Validation
Classification:	Red Hat
Component:	images
Sub Component:
Version:	RHEL6.6
Hardware:	x86_64
OS:	Linux
Priority:	unspecified
Severity:	unspecified
Target Milestone:	---
Assignee:	mkovacik
QA Contact:	mkovacik
Docs Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+	depends on / blocked

Reported:	2014-08-28 13:12 UTC by Martin Minar
Modified:	2016-07-04 00:58 UTC (History)
CC List:	1 user (show)
Fixed In Version:
Doc Type:	Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed:	2014-11-28 13:28:21 UTC
Target Upstream Version:
Embargoed:

Attachments	(Terms of Use)
ami-2e9d4446-log.yaml (451.18 KB, text/yaml) 2014-08-28 13:12 UTC, Martin Minar	no flags	Details
View All

Description Martin Minar 2014-08-28 13:12:30 UTC

Comment 1 Martin Minar 2014-08-28 13:12:37 UTC

Created attachment 931958 [details]
ami-2e9d4446-log.yaml

Comment 2 Martin Minar 2014-08-28 13:12:39 UTC

# m1.large: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409129565.974:6): avc:
  denied  { setattr } for  pid=1056 comm="prelink" name="" dev=pipefs
  ino=11540 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129567.223:7): avc:
  denied  { setattr } for  pid=1084 comm="prelink" name="" dev=pipefs
  ino=11674 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129584.866:11): avc:
  denied  { setattr } for  pid=1118 comm="prelink" name="" dev=pipefs
  ino=11933 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129609.584:33): avc:
  denied  { setattr } for  pid=1229 comm="prelink" name="" dev=pipefs
  ino=12756 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.387:36): avc:
  denied  { read write } for  pid=1350 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.400:37): avc:
  denied  { read write } for  pid=1352 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.539:38): avc:
  denied  { setattr } for  pid=1366 comm="prelink" name="" dev=pipefs
  ino=13207 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.733:39): avc:
  denied  { setattr } for  pid=1380 comm="prelink" name="" dev=pipefs
  ino=13306 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-191-83-193 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409129565.974:6): avc:
  denied  { setattr } for  pid=1056 comm="prelink" name="" dev=pipefs
  ino=11540 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129567.223:7): avc:
  denied  { setattr } for  pid=1084 comm="prelink" name="" dev=pipefs
  ino=11674 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129584.866:11): avc:
  denied  { setattr } for  pid=1118 comm="prelink" name="" dev=pipefs
  ino=11933 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129609.584:33): avc:
  denied  { setattr } for  pid=1229 comm="prelink" name="" dev=pipefs
  ino=12756 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.387:36): avc:
  denied  { read write } for  pid=1350 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.400:37): avc:
  denied  { read write } for  pid=1352 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.539:38): avc:
  denied  { setattr } for  pid=1366 comm="prelink" name="" dev=pipefs
  ino=13207 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129611.733:39): avc:
  denied  { setattr } for  pid=1380 comm="prelink" name="" dev=pipefs
  ino=13306 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130062.104:525):
  avc:  denied  { setattr } for  pid=2641 comm="prelink" name=""
  dev=pipefs ino=37910
  scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
  tclass=fifo_file  /var/log/audit/audit.log:type=AVC
  msg=audit(1409130773.077:6): avc:  denied  { setattr } for  pid=1063
  comm="prelink" name="" dev=pipefs ino=11777
  scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130774.267:7): avc:
  denied  { setattr } for  pid=1090 comm="prelink" name="" dev=pipefs
  ino=11905 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130777.181:8): avc:
  denied  { setattr } for  pid=1159 comm="prelink" name="" dev=pipefs
  ino=12250 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130778.795:13): avc:
  denied  { read write } for  pid=1283 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130778.803:14): avc:
  denied  { read write } for  pid=1284 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130778.963:15): avc:
  denied  { setattr } for  pid=1295 comm="prelink" name="" dev=pipefs
  ino=12691 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130779.239:16): avc:
  denied  { setattr } for  pid=1309 comm="prelink" name="" dev=pipefs
  ino=12791 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-191-83-193 ~]#
  expectation:   START  END

Comment 3 Martin Minar 2014-08-28 13:12:41 UTC

# c1.xlarge: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: failed
-
  command: grep --color=none 'MemTotal:' /proc/meminfo
  match: .*\r\nMemTotal:\s*([0-9]+)
  result: passed
  value: ['6997860']
-
  command: [ 6997860 -gt 6997900 ]
  result: failed
  actual: 1
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127174.797:6): avc:
  denied  { setattr } for  pid=1237 comm="prelink" name="" dev=pipefs
  ino=12466 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127176.101:7): avc:
  denied  { setattr } for  pid=1265 comm="prelink" name="" dev=pipefs
  ino=12600 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127187.926:11): avc:
  denied  { setattr } for  pid=1299 comm="prelink" name="" dev=pipefs
  ino=12860 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127212.927:35): avc:
  denied  { setattr } for  pid=1410 comm="prelink" name="" dev=pipefs
  ino=13686 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.015:36): avc:
  denied  { read write } for  pid=1528 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.173:37): avc:
  denied  { setattr } for  pid=1546 comm="prelink" name="" dev=pipefs
  ino=14115 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.183:38): avc:
  denied  { read write } for  pid=1547 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.491:39): avc:
  denied  { setattr } for  pid=1561 comm="prelink" name="" dev=pipefs
  ino=14230 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-233-17-226 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: failed
-
  command: grep --color=none 'MemTotal:' /proc/meminfo
  match: .*\r\nMemTotal:\s*([0-9]+)
  result: passed
  value: ['6997860']
-
  command: [ 6997860 -gt 6997900 ]
  result: failed
  actual: 1
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127174.797:6): avc:
  denied  { setattr } for  pid=1237 comm="prelink" name="" dev=pipefs
  ino=12466 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127176.101:7): avc:
  denied  { setattr } for  pid=1265 comm="prelink" name="" dev=pipefs
  ino=12600 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127187.926:11): avc:
  denied  { setattr } for  pid=1299 comm="prelink" name="" dev=pipefs
  ino=12860 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127212.927:35): avc:
  denied  { setattr } for  pid=1410 comm="prelink" name="" dev=pipefs
  ino=13686 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.015:36): avc:
  denied  { read write } for  pid=1528 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.173:37): avc:
  denied  { setattr } for  pid=1546 comm="prelink" name="" dev=pipefs
  ino=14115 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.183:38): avc:
  denied  { read write } for  pid=1547 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.491:39): avc:
  denied  { setattr } for  pid=1561 comm="prelink" name="" dev=pipefs
  ino=14230 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128757.468:6): avc:
  denied  { setattr } for  pid=1246 comm="prelink" name="" dev=pipefs
  ino=12715 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128758.679:7): avc:
  denied  { setattr } for  pid=1273 comm="prelink" name="" dev=pipefs
  ino=12843 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128761.735:8): avc:
  denied  { setattr } for  pid=1342 comm="prelink" name="" dev=pipefs
  ino=13188 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128763.479:13): avc:
  denied  { read write } for  pid=1459 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128763.503:14): avc:
  denied  { read write } for  pid=1464 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128763.691:15): avc:
  denied  { setattr } for  pid=1478 comm="prelink" name="" dev=pipefs
  ino=13635 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128764.016:23): avc:
  denied  { setattr } for  pid=1494 comm="prelink" name="" dev=pipefs
  ino=13756 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-233-17-226 ~]#
  expectation:   START  END

Comment 4 Martin Minar 2014-08-28 13:12:43 UTC

# m1.small: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127190.130:6): avc:
  denied  { setattr } for  pid=1029 comm="prelink" name="" dev=pipefs
  ino=11394 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127192.854:7): avc:
  denied  { setattr } for  pid=1058 comm="prelink" name="" dev=pipefs
  ino=11533 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127204.990:11): avc:
  denied  { setattr } for  pid=1093 comm="prelink" name="" dev=pipefs
  ino=11800 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127240.318:35): avc:
  denied  { setattr } for  pid=1205 comm="prelink" name="" dev=pipefs
  ino=12633 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127245.650:71): avc:
  denied  { read write } for  pid=1363 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262290
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127245.885:72): avc:
  denied  { read write } for  pid=1373 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262292
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127246.086:73): avc:
  denied  { setattr } for  pid=1375 comm="prelink" name="" dev=pipefs
  ino=13280 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127248.750:89): avc:
  denied  { setattr } for  pid=1392 comm="prelink" name="" dev=pipefs
  ino=13438 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-236-220-54 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127190.130:6): avc:
  denied  { setattr } for  pid=1029 comm="prelink" name="" dev=pipefs
  ino=11394 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127192.854:7): avc:
  denied  { setattr } for  pid=1058 comm="prelink" name="" dev=pipefs
  ino=11533 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127204.990:11): avc:
  denied  { setattr } for  pid=1093 comm="prelink" name="" dev=pipefs
  ino=11800 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127240.318:35): avc:
  denied  { setattr } for  pid=1205 comm="prelink" name="" dev=pipefs
  ino=12633 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127245.650:71): avc:
  denied  { read write } for  pid=1363 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262290
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127245.885:72): avc:
  denied  { read write } for  pid=1373 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262292
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127246.086:73): avc:
  denied  { setattr } for  pid=1375 comm="prelink" name="" dev=pipefs
  ino=13280 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127248.750:89): avc:
  denied  { setattr } for  pid=1392 comm="prelink" name="" dev=pipefs
  ino=13438 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128866.333:6): avc:
  denied  { setattr } for  pid=1030 comm="prelink" name="" dev=pipefs
  ino=11672 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128868.934:7): avc:
  denied  { setattr } for  pid=1058 comm="prelink" name="" dev=pipefs
  ino=11806 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128874.591:8): avc:
  denied  { setattr } for  pid=1124 comm="prelink" name="" dev=pipefs
  ino=12150 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128879.121:27): avc:
  denied  { read write } for  pid=1249 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262290
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128879.152:28): avc:
  denied  { read write } for  pid=1252 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262292
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128879.678:29): avc:
  denied  { setattr } for  pid=1283 comm="prelink" name="" dev=pipefs
  ino=12697 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128881.131:34): avc:
  denied  { setattr } for  pid=1298 comm="prelink" name="" dev=pipefs
  ino=12795 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-236-220-54 ~]#
  expectation:   START  END

Comment 5 Martin Minar 2014-08-28 13:12:45 UTC

# m1.xlarge: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409129565.937:6): avc:
  denied  { setattr } for  pid=1123 comm="prelink" name="" dev=pipefs
  ino=11844 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129567.321:7): avc:
  denied  { setattr } for  pid=1151 comm="prelink" name="" dev=pipefs
  ino=11978 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129580.096:11): avc:
  denied  { setattr } for  pid=1185 comm="prelink" name="" dev=pipefs
  ino=12237 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129608.194:35): avc:
  denied  { setattr } for  pid=1296 comm="prelink" name="" dev=pipefs
  ino=13063 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.040:52): avc:
  denied  { read write } for  pid=1409 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.040:53): avc:
  denied  { read write } for  pid=1408 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.299:60): avc:
  denied  { setattr } for  pid=1439 comm="prelink" name="" dev=pipefs
  ino=13609 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.617:63): avc:
  denied  { setattr } for  pid=1476 comm="prelink" name="" dev=pipefs
  ino=13770 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-45-160-107 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409129565.937:6): avc:
  denied  { setattr } for  pid=1123 comm="prelink" name="" dev=pipefs
  ino=11844 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129567.321:7): avc:
  denied  { setattr } for  pid=1151 comm="prelink" name="" dev=pipefs
  ino=11978 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129580.096:11): avc:
  denied  { setattr } for  pid=1185 comm="prelink" name="" dev=pipefs
  ino=12237 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129608.194:35): avc:
  denied  { setattr } for  pid=1296 comm="prelink" name="" dev=pipefs
  ino=13063 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.040:52): avc:
  denied  { read write } for  pid=1409 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.040:53): avc:
  denied  { read write } for  pid=1408 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.299:60): avc:
  denied  { setattr } for  pid=1439 comm="prelink" name="" dev=pipefs
  ino=13609 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409129610.617:63): avc:
  denied  { setattr } for  pid=1476 comm="prelink" name="" dev=pipefs
  ino=13770 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130061.413:525):
  avc:  denied  { setattr } for  pid=2712 comm="prelink" name=""
  dev=pipefs ino=38235
  scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:system_cronjob_t:s0-s0:c0.c1023
  tclass=fifo_file  /var/log/audit/audit.log:type=AVC
  msg=audit(1409130746.410:6): avc:  denied  { setattr } for  pid=1125
  comm="prelink" name="" dev=pipefs ino=12090
  scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130747.620:7): avc:
  denied  { setattr } for  pid=1152 comm="prelink" name="" dev=pipefs
  ino=12218 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130750.833:8): avc:
  denied  { setattr } for  pid=1221 comm="prelink" name="" dev=pipefs
  ino=12563 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130752.505:13): avc:
  denied  { read write } for  pid=1334 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130752.510:14): avc:
  denied  { read write } for  pid=1336 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130752.716:15): avc:
  denied  { setattr } for  pid=1357 comm="prelink" name="" dev=pipefs
  ino=13004 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409130752.981:16): avc:
  denied  { setattr } for  pid=1371 comm="prelink" name="" dev=pipefs
  ino=13098 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-45-160-107 ~]#
  expectation:   START  END

Comment 6 Martin Minar 2014-08-28 13:12:47 UTC

# m2.xlarge: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127172.021:6): avc:
  denied  { setattr } for  pid=1048 comm="prelink" name="" dev=pipefs
  ino=11547 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127172.931:7): avc:
  denied  { setattr } for  pid=1076 comm="prelink" name="" dev=pipefs
  ino=11681 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127185.236:11): avc:
  denied  { setattr } for  pid=1110 comm="prelink" name="" dev=pipefs
  ino=11940 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127206.949:32): avc:
  denied  { setattr } for  pid=1221 comm="prelink" name="" dev=pipefs
  ino=12762 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.433:34): avc:
  denied  { read write } for  pid=1339 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.553:37): avc:
  denied  { setattr } for  pid=1357 comm="prelink" name="" dev=pipefs
  ino=13198 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.752:38): avc:
  denied  { read write } for  pid=1369 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.788:39): avc:
  denied  { setattr } for  pid=1372 comm="prelink" name="" dev=pipefs
  ino=13313 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-29-50-200 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127172.021:6): avc:
  denied  { setattr } for  pid=1048 comm="prelink" name="" dev=pipefs
  ino=11547 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127172.931:7): avc:
  denied  { setattr } for  pid=1076 comm="prelink" name="" dev=pipefs
  ino=11681 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127185.236:11): avc:
  denied  { setattr } for  pid=1110 comm="prelink" name="" dev=pipefs
  ino=11940 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127206.949:32): avc:
  denied  { setattr } for  pid=1221 comm="prelink" name="" dev=pipefs
  ino=12762 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.433:34): avc:
  denied  { read write } for  pid=1339 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.553:37): avc:
  denied  { setattr } for  pid=1357 comm="prelink" name="" dev=pipefs
  ino=13198 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.752:38): avc:
  denied  { read write } for  pid=1369 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127208.788:39): avc:
  denied  { setattr } for  pid=1372 comm="prelink" name="" dev=pipefs
  ino=13313 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128717.807:6): avc:
  denied  { setattr } for  pid=1057 comm="prelink" name="" dev=pipefs
  ino=11756 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128718.768:7): avc:
  denied  { setattr } for  pid=1084 comm="prelink" name="" dev=pipefs
  ino=11884 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128721.545:8): avc:
  denied  { setattr } for  pid=1153 comm="prelink" name="" dev=pipefs
  ino=12230 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128722.796:9): avc:
  denied  { read write } for  pid=1268 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128722.842:10): avc:
  denied  { read write } for  pid=1275 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128722.996:11): avc:
  denied  { setattr } for  pid=1286 comm="prelink" name="" dev=pipefs
  ino=12641 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128723.209:14): avc:
  denied  { setattr } for  pid=1303 comm="prelink" name="" dev=pipefs
  ino=12764 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-29-50-200 ~]#
  expectation:   START  END

Comment 7 Martin Minar 2014-08-28 13:12:49 UTC

# t1.micro: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: failed
-
  command: df -h | grep 15G
  result: failed
  actual: 1
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: passed
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127202.596:6): avc:
  denied  { setattr } for  pid=1007 comm="prelink" name="" dev=pipefs
  ino=11262 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127203.831:7): avc:
  denied  { setattr } for  pid=1034 comm="prelink" name="" dev=pipefs
  ino=11390 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127213.035:11): avc:
  denied  { setattr } for  pid=1067 comm="prelink" name="" dev=pipefs
  ino=11642 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127239.729:35): avc:
  denied  { setattr } for  pid=1174 comm="prelink" name="" dev=pipefs
  ino=12220 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.869:36): avc:
  denied  { read write } for  pid=1294 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262353
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.077:37): avc:
  denied  { setattr } for  pid=1310 comm="prelink" name="" dev=pipefs
  ino=12649 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.408:38): avc:
  denied  { read write } for  pid=1318 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262355
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.760:39): avc:
  denied  { setattr } for  pid=1325 comm="prelink" name="" dev=pipefs
  ino=12757 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-191-41-147 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127202.596:6): avc:
  denied  { setattr } for  pid=1007 comm="prelink" name="" dev=pipefs
  ino=11262 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127203.831:7): avc:
  denied  { setattr } for  pid=1034 comm="prelink" name="" dev=pipefs
  ino=11390 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127213.035:11): avc:
  denied  { setattr } for  pid=1067 comm="prelink" name="" dev=pipefs
  ino=11642 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127239.729:35): avc:
  denied  { setattr } for  pid=1174 comm="prelink" name="" dev=pipefs
  ino=12220 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.869:36): avc:
  denied  { read write } for  pid=1294 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262353
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.077:37): avc:
  denied  { setattr } for  pid=1310 comm="prelink" name="" dev=pipefs
  ino=12649 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.408:38): avc:
  denied  { read write } for  pid=1318 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262355
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.760:39): avc:
  denied  { setattr } for  pid=1325 comm="prelink" name="" dev=pipefs
  ino=12757 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128846.706:6): avc:
  denied  { setattr } for  pid=1004 comm="prelink" name="" dev=pipefs
  ino=11246 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128847.956:7): avc:
  denied  { setattr } for  pid=1031 comm="prelink" name="" dev=pipefs
  ino=11374 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128851.408:8): avc:
  denied  { setattr } for  pid=1100 comm="prelink" name="" dev=pipefs
  ino=11718 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128853.244:13): avc:
  denied  { read write } for  pid=1220 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262355
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128853.253:14): avc:
  denied  { read write } for  pid=1221 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262353
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128853.463:15): avc:
  denied  { setattr } for  pid=1236 comm="prelink" name="" dev=pipefs
  ino=12159 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128853.965:16): avc:
  denied  { setattr } for  pid=1250 comm="prelink" name="" dev=pipefs
  ino=12259 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-191-41-147 ~]#
  expectation:   START  END

Comment 8 Martin Minar 2014-08-28 13:12:50 UTC

# m2.4xlarge: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127195.542:6): avc:
  denied  { setattr } for  pid=1239 comm="prelink" name="" dev=pipefs
  ino=12475 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127196.488:7): avc:
  denied  { setattr } for  pid=1267 comm="prelink" name="" dev=pipefs
  ino=12609 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.956:11): avc:
  denied  { setattr } for  pid=1301 comm="prelink" name="" dev=pipefs
  ino=12868 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127240.267:35): avc:
  denied  { setattr } for  pid=1412 comm="prelink" name="" dev=pipefs
  ino=13697 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.831:60): avc:
  denied  { read write } for  pid=1527 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.834:61): avc:
  denied  { read write } for  pid=1528 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.011:62): avc:
  denied  { setattr } for  pid=1578 comm="prelink" name="" dev=pipefs
  ino=14300 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.224:63): avc:
  denied  { setattr } for  pid=1593 comm="prelink" name="" dev=pipefs
  ino=14408 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-6-221-34 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127195.542:6): avc:
  denied  { setattr } for  pid=1239 comm="prelink" name="" dev=pipefs
  ino=12475 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127196.488:7): avc:
  denied  { setattr } for  pid=1267 comm="prelink" name="" dev=pipefs
  ino=12609 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127215.956:11): avc:
  denied  { setattr } for  pid=1301 comm="prelink" name="" dev=pipefs
  ino=12868 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127240.267:35): avc:
  denied  { setattr } for  pid=1412 comm="prelink" name="" dev=pipefs
  ino=13697 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.831:60): avc:
  denied  { read write } for  pid=1527 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127241.834:61): avc:
  denied  { read write } for  pid=1528 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.011:62): avc:
  denied  { setattr } for  pid=1578 comm="prelink" name="" dev=pipefs
  ino=14300 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127242.224:63): avc:
  denied  { setattr } for  pid=1593 comm="prelink" name="" dev=pipefs
  ino=14408 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128792.968:6): avc:
  denied  { setattr } for  pid=1246 comm="prelink" name="" dev=pipefs
  ino=12731 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128793.861:7): avc:
  denied  { setattr } for  pid=1273 comm="prelink" name="" dev=pipefs
  ino=12859 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128796.174:8): avc:
  denied  { setattr } for  pid=1342 comm="prelink" name="" dev=pipefs
  ino=13204 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128797.359:9): avc:
  denied  { read write } for  pid=1459 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128797.364:10): avc:
  denied  { read write } for  pid=1461 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128797.505:11): avc:
  denied  { setattr } for  pid=1475 comm="prelink" name="" dev=pipefs
  ino=13615 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128797.728:12): avc:
  denied  { setattr } for  pid=1489 comm="prelink" name="" dev=pipefs
  ino=13708 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-6-221-34 ~]#
  expectation:   START  END

Comment 9 Martin Minar 2014-08-28 13:12:52 UTC

# m2.2xlarge: failed
stage1:testcase_01_bash_history: passed
stage1:testcase_02_selinux_context: passed
stage1:testcase_03_running_services: passed
stage1:testcase_04_cloud_firstboot: passed
stage1:testcase_05_grub: passed
stage1:testcase_06_inittab: passed
stage1:testcase_07_libc6_xen_conf: passed
stage1:testcase_08_memory: passed
stage1:testcase_09_nameserver: passed
stage1:testcase_10_networking: passed
stage1:testcase_11_package_set: passed
stage1:testcase_12_passwd_group: passed
stage1:testcase_13_resize2fs: passed
stage1:testcase_14_host_details: passed
stage1:testcase_15_rhel_version: passed
stage1:testcase_16_selinux: passed
stage1:testcase_17_shells: passed
stage1:testcase_18_sshd: passed
stage1:testcase_19_rhn_system_id: passed
stage1:testcase_20_auditd: passed
stage1:testcase_21_disk_size_format: passed
stage1:testcase_22_gpg_keys: passed
stage1:testcase_23_syslog: passed
stage1:testcase_24_yum_plugin: passed
stage1:testcase_25_uname: passed
stage1:testcase_26_verify_rpms: passed
stage1:testcase_27_yum_repos: failed
-
  result: failed
  actual repos:
  {'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-releases-beta': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-client-config-server-6-beta': True}
  expected repos: {'rhui-REGION-rhel-server-supplementary': False,
  'rhui-REGION-rhel-server-rhscl': True,
  'rhui-REGION-rhel-server-source-rhscl': False, 'rhel-source': False,
  'rhui-REGION-rhel-server-source-supplementary': False,
  'rhui-REGION-rhel-server-debug-supplementary': False,
  'rhui-REGION-rhel-server-debug-rhscl': False,
  'rhui-REGION-client-config-server-6-beta': True,
  'rhui-REGION-rhel-server-releases-source-beta': False,
  'rhui-REGION-rhel-server-releases-source': False,
  'rhui-REGION-rhel-server-releases-optional-source-beta': False,
  'rhel-source-beta': False, 'rhui-REGION-rhel-server-releases-beta':
  True, 'rhui-REGION-rhel-server-releases-optional-source': False,
  'rhui-REGION-client-config-server-6': True,
  'rhui-REGION-rhel-server-releases': True,
  'rhui-REGION-rhel-server-releases-optional-beta': True,
  'rhui-REGION-rhel-server-releases-optional': True}
stage1:testcase_30_rhn_certificates: failed
-
  command: rpm -ql rh-amazon-rhui-client rh-amazon-rhui-client-beta
  result: passed
  value: package rh-amazon-rhui-client is not installed
  /etc/init.d/choose_beta_repo  /etc/init.d/rh-cloud-firstboot
  /etc/pki/rhui/ca.crt  /etc/pki/rhui/cdn.redhat.com-chain.crt
  /etc/pki/rhui/content-rhel6-beta.key
  /etc/pki/rhui/product/content-rhel6-beta.crt
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  /etc/pki/rhui/rhui-client-config-server-6-beta.key
  /etc/yum.repos.d/redhat-rhui-beta.repo
  /etc/yum.repos.d/redhat-rhui-client-config-beta.repo
  /etc/yum.repos.d/rhui-load-balancers.conf
  /etc/yum/pluginconf.d/amazon-id.conf
  /etc/yum/pluginconf.d/rhui-lb.conf
  /usr/lib/yum-plugins/amazon-id.py
  /usr/lib/yum-plugins/amazon-id.pyc
  /usr/lib/yum-plugins/amazon-id.pyo  /usr/lib/yum-plugins/rhui-lb.py
  /usr/lib/yum-plugins/rhui-lb.pyc  /usr/lib/yum-plugins/rhui-lb.pyo
  /usr/sbin/choose_repo.py  /usr/sbin/rh-cloud-firstboot.py
-
  command: openssl x509 -in /etc/pki/rhui/ca.crt -noout -dates
  result: passed
  value: notBefore=Aug 23 19:46:02 2011 GMT  notAfter=Nov 30 19:46:02
  2017 GMT
-
  result: failed
  comment: (/etc/pki/rhui/ca.crt).notAfter=2017-11-30 19:46:02;
  expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in /etc/pki/rhui/cdn.redhat.com-chain.crt
  -noout -dates
  result: passed
  value: notBefore=Mar 18 11:24:54 2010 GMT  notAfter=Mar 13 11:24:54
  2030 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/cdn.redhat.com-chain.crt).notAfter=2030-03-13
  11:24:54; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/content-rhel6-beta.crt -noout -dates
  result: passed
  value: notBefore=Mar 29 18:34:17 2012 GMT  notAfter=Nov 30 18:34:17
  2020 GMT
-
  result: passed
  comment:
  (/etc/pki/rhui/product/content-rhel6-beta.crt).notAfter=2020-11-30
  18:34:17; expecting: 2020-11-10 00:00:00
-
  command: openssl x509 -in
  /etc/pki/rhui/product/rhui-client-config-server-6-beta.crt -noout
  -dates
  result: passed
  value: notBefore=Mar 29 18:38:42 2012 GMT  notAfter=Nov 30 18:38:42
  2020 GMT
-
  result: passed
  comment: (/etc/pki/rhui/product/rhui-client-config-server-6-beta.crt
  ).notAfter=2020-11-30 18:38:42; expecting: 2020-11-10 00:00:00
stage1:testcase_31_subscription_management: passed
stage1:testcase_32_ephemeral: failed
-
  command: ls -la /sbin/mkfs.vfat 2> /dev/null | wc -l
  result: passed
  value: 1
-
  command: fdisk -l /dev/xvdj | grep '^Disk'
  result: failed
  actual: 1
-
  command: grep '/dev/xvdj ' /proc/mounts  | wc -l
  result: passed
  value: 0
-
  command: mkfs.vfat -I /dev/xvdj
  result: failed
  actual: 1
stage1:testcase_33_userdata: passed
stage1:testcase_34_cpu: passed
stage1:testcase_360_ebs: passed
stage1:testcase_39_root_is_locked: passed
stage1:testcase_41_rh_amazon_rhui_client: passed
stage1:testcase_42_ipv6: passed
stage1:testcase_50_yum_package_install: passed
stage1:testcase_55_yum_group_install: passed
stage1:testcase_60_yum_update: passed
stage1:testcase_61_yum_proxy: passed
stage1:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127185.033:6): avc:
  denied  { setattr } for  pid=1126 comm="prelink" name="" dev=pipefs
  ino=11859 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127186.059:7): avc:
  denied  { setattr } for  pid=1154 comm="prelink" name="" dev=pipefs
  ino=11993 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127203.307:11): avc:
  denied  { setattr } for  pid=1188 comm="prelink" name="" dev=pipefs
  ino=12252 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127224.242:33): avc:
  denied  { setattr } for  pid=1299 comm="prelink" name="" dev=pipefs
  ino=13075 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.760:36): avc:
  denied  { read write } for  pid=1414 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.902:37): avc:
  denied  { setattr } for  pid=1435 comm="prelink" name="" dev=pipefs
  ino=13510 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.958:38): avc:
  denied  { read write } for  pid=1445 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127226.086:39): avc:
  denied  { setattr } for  pid=1450 comm="prelink" name="" dev=pipefs
  ino=13625 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-140-73-205 ~]#
  expectation:   START  END
stage1:testcase_99_reboot: passed
stage2:testcase_08_memory: passed
stage2:testcase_25_uname: passed
stage2:testcase_80_no_avc_denials: failed
-
  command: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END
  result: failed
  actual: echo START; grep 'avc:[[:space:]]*denied' /var/log/messages
  /var/log/audit/audit.log | grep -v userdata; echo END  START
  /var/log/audit/audit.log:type=AVC msg=audit(1409127185.033:6): avc:
  denied  { setattr } for  pid=1126 comm="prelink" name="" dev=pipefs
  ino=11859 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127186.059:7): avc:
  denied  { setattr } for  pid=1154 comm="prelink" name="" dev=pipefs
  ino=11993 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127203.307:11): avc:
  denied  { setattr } for  pid=1188 comm="prelink" name="" dev=pipefs
  ino=12252 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127224.242:33): avc:
  denied  { setattr } for  pid=1299 comm="prelink" name="" dev=pipefs
  ino=13075 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.760:36): avc:
  denied  { read write } for  pid=1414 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.902:37): avc:
  denied  { setattr } for  pid=1435 comm="prelink" name="" dev=pipefs
  ino=13510 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127225.958:38): avc:
  denied  { read write } for  pid=1445 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409127226.086:39): avc:
  denied  { setattr } for  pid=1450 comm="prelink" name="" dev=pipefs
  ino=13625 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128815.028:6): avc:
  denied  { setattr } for  pid=1125 comm="prelink" name="" dev=pipefs
  ino=12092 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128815.945:7): avc:
  denied  { setattr } for  pid=1152 comm="prelink" name="" dev=pipefs
  ino=12220 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128818.146:8): avc:
  denied  { setattr } for  pid=1221 comm="prelink" name="" dev=pipefs
  ino=12565 scontext=system_u:system_r:prelink_t:s0
  tcontext=system_u:system_r:initrc_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128819.200:13): avc:
  denied  { read write } for  pid=1330 comm="prelink"
  path="/var/spool/postfix/public/pickup" dev=xvda1 ino=262289
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128819.208:14): avc:
  denied  { read write } for  pid=1335 comm="prelink"
  path="/var/spool/postfix/public/qmgr" dev=xvda1 ino=262291
  scontext=system_u:system_r:prelink_mask_t:s0
  tcontext=system_u:object_r:postfix_public_t:s0 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128819.382:22): avc:
  denied  { setattr } for  pid=1359 comm="prelink" name="" dev=pipefs
  ino=13037 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  /var/log/audit/audit.log:type=AVC msg=audit(1409128819.628:25): avc:
  denied  { setattr } for  pid=1373 comm="prelink" name="" dev=pipefs
  ino=13149 scontext=system_u:system_r:prelink_t:s0-s0:c0.c1023
  tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=fifo_file
  END  [root@ip-10-140-73-205 ~]#
  expectation:   START  END

Comment 10 mkovacik 2014-11-28 13:28:21 UTC

closing irrelevant validation bugs

Note You need to log in before you can comment on or make changes to this bug.