Bug 1534119 - lldpad startup fails due to SELinux map denial (breaks FCoE)
Summary: lldpad startup fails due to SELinux map denial (breaks FCoE)
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Unspecified
urgent
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: AcceptedBlocker
: 1534118 (view as bug list)
Depends On:
Blocks: F28FinalBlocker
TreeView+ depends on / blocked
 
Reported: 2018-01-13 10:23 UTC by lnie
Modified: 2018-02-01 13:53 UTC (History)
13 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2018-02-01 13:53:53 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
journal (272.46 KB, text/plain)
2018-01-14 02:09 UTC, lnie
no flags Details
journal (257.73 KB, text/plain)
2018-01-23 12:08 UTC, lnie
no flags Details

Description lnie 2018-01-13 10:23:42 UTC
Description of problem:
I know lldpad is supposed to be disabled for Broadcom devices,
but intel devices really dose need lldpad,please fix this,thanks a lot.
Actually,fcoe-utils doesn't work well with Broadcom devices since f27,please see bug#1534118


Version-Release number of selected component (if applicable):
kernel-4.15.0-0.rc7.git2.1.fc28.x86_64
fcoe-utils-1.0.32-3.fc27.x86_64
lldpad-1.0.1-8.git036e314.fc27.x86_64

How reproducible:
always

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 1 lnie 2018-01-14 02:09:22 UTC
Created attachment 1380854 [details]
journal

Comment 2 Adam Williamson 2018-01-23 08:24:42 UTC
This may be due to an selinux denial:

Jan 13 20:57:40 storageqe-13.rhts.eng.bos.redhat.com audit[8667]: AVC avc:  denied  { map } for  pid=8667 comm="lldpad" path="/dev/shm/lldpad.state" dev="tmpfs" ino=30443 scontext=system_u:system_r:lldpad_t:s0 tcontext=system_u:object_r:lldpad_tmpfs_t:s0 tclass=file permissive=0

lili, can you try it with enforcing=0 boot parameter and see if it works then? Thanks!

Comment 3 lnie 2018-01-23 12:08:08 UTC
Created attachment 1384817 [details]
journal

Comment 4 lnie 2018-01-23 12:11:36 UTC
Adam,systemctl start lldpad successfully,after setenforce 0:)

Comment 5 lnie 2018-01-23 12:29:23 UTC
*** Bug 1534118 has been marked as a duplicate of this bug. ***

Comment 6 Adam Williamson 2018-01-23 13:13:12 UTC
Proposing as a Final blocker: criterion "The installer must be able to detect (if possible) and install to supported network-attached storage devices." (I think that's right, right lili? This breaks FCoE install / boot?)

Comment 7 lnie 2018-01-24 03:02:10 UTC
Adam,right,fcoe dosen't works on ixgbe drivers without lldpad running

Comment 8 Kamil Páral 2018-01-29 12:39:05 UTC
+1 blocker per comment 6

Comment 9 František Zatloukal 2018-01-29 12:39:43 UTC
+1 blocker

Comment 10 Lukas Brabec 2018-01-29 12:39:59 UTC
+1 blocker

Comment 11 Kamil Páral 2018-01-29 12:41:21 UTC
Marking as accepted blocker.


Note You need to log in before you can comment on or make changes to this bug.