Previously, SELinux prevented redis from connecting to its own port, resulting in redis failing at restart.
With this update, redis has the permission to connect to the 'redis' labeled port. As a result, redis runs properly and resource restart is successful.
Description of problem:
Redis fails to restart in HA setup with 3 controllers due to SELinux
Version-Release number of selected component (if applicable):
openstack-selinux-0.6.45-1.el7ost.noarch
How reproducible:
100%
Steps to Reproduce:
1. Deploy environment with 3 controllers
2. On one of the controllers run pcs resource restart redis-master
3. Watch the /var/log/audit/audit.log
Actual results:
type=AVC msg=audit(1448063445.338:2728): avc: denied { name_connect } for pid=30202 comm="redis-server" dest=6379 scontext=system_u:system_r:redis_t:s0 tcontext=system_u:object_r:redis_port_t:s0 tclass=tcp_socket
The resouce fails to restart:
Error: Could not complete shutdown of redis-master, 1 resources remaining
Error performing operation: Timer expired
Expected results:
The resource is restarted.
Additional info:
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory, and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://rhn.redhat.com/errata/RHEA-2016-0603.html
Description of problem: Redis fails to restart in HA setup with 3 controllers due to SELinux Version-Release number of selected component (if applicable): openstack-selinux-0.6.45-1.el7ost.noarch How reproducible: 100% Steps to Reproduce: 1. Deploy environment with 3 controllers 2. On one of the controllers run pcs resource restart redis-master 3. Watch the /var/log/audit/audit.log Actual results: type=AVC msg=audit(1448063445.338:2728): avc: denied { name_connect } for pid=30202 comm="redis-server" dest=6379 scontext=system_u:system_r:redis_t:s0 tcontext=system_u:object_r:redis_port_t:s0 tclass=tcp_socket The resouce fails to restart: Error: Could not complete shutdown of redis-master, 1 resources remaining Error performing operation: Timer expired Expected results: The resource is restarted. Additional info: