Bug 1313617 - selinux blocks access to glance-api" name="/" dev="tmpfs"
Summary: selinux blocks access to glance-api" name="/" dev="tmpfs"
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-selinux
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ga
: 8.0 (Liberty)
Assignee: Ryan Hallisey
QA Contact: bkopilov
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-03-02 04:23 UTC by bkopilov
Modified: 2016-04-07 21:32 UTC (History)
4 users (show)

Fixed In Version: openstack-selinux-0.6.58-1.el7ost
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2016-04-07 21:32:11 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHEA-2016:0603 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 8 Enhancement Advisory 2016-04-08 00:53:53 UTC

Description bkopilov 2016-03-02 04:23:12 UTC
Description of problem:
Dell installed Beta7 , 3 controllers + 3 computes .
versions :
openstack-selinux-0.6.53-1.el7ost.noarch
python-glance-store-0.9.1-1.el7ost.noarch
python-glance-11.0.1-3.el7ost.noarch
python-glanceclient-1.1.0-1.el7ost.noarch
openstack-glance-11.0.1-3.el7ost.noarch



Selinux denies :

/var/log/audit/audit.log.2:23935:type=AVC msg=audit(1456857432.481:34143): avc:  denied  { getattr } for  pid=91939 comm="glance-api" name="/" dev="tmpfs" ino=1236 scontext=system_u:system_r:glance_api_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem
/var/log/audit/audit.log.2:23937:type=AVC msg=audit(1456857432.481:34144): avc:  denied  { getattr } for  pid=91939 comm="glance-api" name="/" dev="tmpfs" ino=1236 scontext=system_u:system_r:glance_api_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 bkopilov 2016-03-02 04:28:17 UTC
Not sure if its related but in /var/log/messages there is a flood with message:

Mar  1 11:02:20 localhost glance-api: libust[72821/144429]: Error: Error opening shm /lttng-ust-wait-5-161 (in get_wait_shm() at lttng-ust-comm.c:886)
Mar  1 11:02:20 localhost glance-api: libust[72821/144428]: Error: Error opening shm /lttng-ust-wait-5 (in get_wait_shm() at lttng-ust-comm.c:886)
Mar  1 11:02:25 localhost glance-api: libust[72821/144429]: Error: Error opening shm /lttng-ust-wait-5-161 (in get_wait_shm() at lttng-ust-comm.c:886)
Mar  1 11:02:25 localhost glance-api: libust[72821/144428]: Error: Error opening shm /lttng-ust-wait-5 (in get_wait_shm() at lttng-ust-comm.c:886)


Benny

Comment 6 bkopilov 2016-04-06 09:57:05 UTC
did not manage to reproduce
Benny

Comment 7 errata-xmlrpc 2016-04-07 21:32:11 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHEA-2016-0603.html


Note You need to log in before you can comment on or make changes to this bug.