Bug 1334732 - Selinux is blocking OpenFlow
Summary: Selinux is blocking OpenFlow
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-selinux
Version: 8.0 (Liberty)
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: async
: 8.0 (Liberty)
Assignee: Ryan Hallisey
QA Contact: Itzik Brown
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-05-10 12:25 UTC by Arie Bregman
Modified: 2018-10-18 07:21 UTC (History)
6 users (show)

Fixed In Version: openstack-selinux-0.7.6-1.el7ost
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
N/A
Last Closed: 2016-11-14 19:44:57 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:2708 0 normal SHIPPED_LIVE Red Hat OpenStack Platform 8 Bug Fix and Enhancement Advisory 2016-11-15 00:43:33 UTC

Description Arie Bregman 2016-05-10 12:25:00 UTC 
Description of problem:

Selinux is blocking OpenFlow. OF isn't able to create rules.

Version-Release number of selected component (if applicable): 8.0


How reproducible: 100%


Steps to Reproduce:
1. Deploy OpenStack with OpenDaylight 
2. Connect openvswitch to opendaylight: "ovs-vsctl set-manager tcp:<opendaylight_hostname>:6640

Actual results: "avc:  denied  { name_connect } for  pid=5765 comm="ovs-vswitchd"" in audit.log

Expected results: No denials in audit.log


Additional info:
Log attached
Comment 3 Ryan Hallisey 2016-08-29 13:29:57 UTC 
corenet_tcp_connect_openvswitch_port(openvswitch_t)
Comment 7 Lon Hohberger 2016-11-07 15:31:33 UTC 
* openstack-selinux Regression test passes (incl. above AVC)
* change noted in comment #3 is present
Comment 9 errata-xmlrpc 2016-11-14 19:44:57 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-2708.html
Note You need to log in before you can comment on or make changes to this bug.