Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1180140

Summary:	rabbitmq-server rpm should depend on openstack-selinux
Product:	Red Hat OpenStack	Reporter:	David Juran <djuran>
Component:	rabbitmq-server	Assignee:	Peter Lemenkov <plemenko>
Status:	CLOSED NOTABUG	QA Contact:	yeylon <yeylon>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	7.0 (Kilo)	CC:	apevec, djuran, jeckersb, lhh, plemenko, srevivo, yeylon
Target Milestone:	---	Keywords:	ZStream
Target Release:	8.0 (Liberty)
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	rabbitmq-server-3.3.5-11.el7ost	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2015-12-02 11:52:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1139277

Description David Juran 2015-01-08 13:30:26 UTC

Description of problem:
The rabbitmq-server rpm does not have a dependency on the openstack-selinux rpm. Trying to start the rabbitmq-server without this package installed will fail with AVC denials

Version-Release number of selected component (if applicable):
rabbitmq-server-3.3.5-2.el7ost

Comment 3 Peter Lemenkov 2015-11-26 13:25:01 UTC

Hello!

I wonder if this is still required? I'm asking because repoquery shows that nobody requires this package.

[root@openstack ~]# repoquery --whatrequires openstack-selinux --releasever 7
openstack-selinux-test-0:0.6.46-1.el7ost.noarch
[root@openstack ~]#

Comment 4 David Juran 2015-12-01 16:24:37 UTC

Well that's the problem, no-one requires it, instead the various installers we have (including the manual procedure) need to explicitly install it in order to get OpenStack to work. So yes, adding the requirement would be a good thing to do. 

And maybe not only in the rabbitmq-server but it probably would make sense in every OpenStack package.

Comment 5 Peter Lemenkov 2015-12-02 11:52:28 UTC

Ok, I've added a dependency and built for RHOS8. Please test if it works as expected (a dependency pulled in automatically, which I'm certain it actually does).

Btw have you you tried to contact other affected components' maintainers - what's their opinion on this?

Comment 6 Lon Hohberger 2016-02-12 19:59:29 UTC

Packages should *never* depend on selinux-policy or openstack-selinux.

Either the installation takes care of installing them, the user installs them, or the user turns selinux to permissive or off (not recommended).