RHEL Engineering is moving the tracking of its product development work on RHEL 6 through RHEL 9 to Red Hat Jira (issues.redhat.com). If you're a Red Hat customer, please continue to file support cases via the Red Hat customer portal. If you're not, please head to the "RHEL project" in Red Hat Jira and file new tickets here. Individual Bugzilla bugs in the statuses "NEW", "ASSIGNED", and "POST" are being migrated throughout September 2023. Bugs of Red Hat partners with an assigned Engineering Partner Manager (EPM) are migrated in late September as per pre-agreed dates. Bugs against components "kernel", "kernel-rt", and "kpatch" are only migrated if still in "NEW" or "ASSIGNED". If you cannot log in to RH Jira, please consult article #7032570. That failing, please send an e-mail to the RH Jira admins at rh-issues@redhat.com to troubleshoot your issue as a user management inquiry. The email creates a ServiceNow ticket with Red Hat. Individual Bugzilla bugs that are migrated will be moved to status "CLOSED", resolution "MIGRATED", and set with "MigratedToJIRA" in "Keywords". The link to the successor Jira issue will be found under "Links", have a little "two-footprint" icon next to it, and direct you to the "RHEL project" in Red Hat Jira (issue links are of type "https://issues.redhat.com/browse/RHEL-XXXX", where "X" is a digit). This same link will be available in a blue banner at the top of the page informing you that that bug has been migrated.
Bug 1636367 - scap-security-guide build/rebuild is not stable
Summary: scap-security-guide build/rebuild is not stable
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Linux 7
Classification: Red Hat
Component: scap-security-guide
Version: 7.5
Hardware: x86_64
OS: Linux
unspecified
unspecified
Target Milestone: rc
: ---
Assignee: Watson Yuuma Sato
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-10-05 08:46 UTC by Alex Baranowski
Modified: 2018-11-13 14:04 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-11-13 14:04:16 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
typescript made with `script` command (724.08 KB, text/plain)
2018-10-05 08:46 UTC, Alex Baranowski
no flags Details

Description Alex Baranowski 2018-10-05 08:46:40 UTC
Created attachment 1490779 [details]
typescript made with `script` command

Description of problem:
scap-security-guide build/rebuild is not stable.

Version-Release number of selected component (if applicable):
https://access.redhat.com/downloads/content/rhel---7/x86_64/2464/scap-security-guide/0.1.25-3.el7/src/fd431d51/package

scap-security-guide-0.1.36-10.el7_5.src.rpm

How reproducible:


Steps to Reproduce:
1. Get some RHEL machine vagrant init generic/rhel7 && vagrant up
2. Register machine, update && reboot.
3. Get scap-security-guide src.rpm - link above.
4. Copy src.rpm to the machine.
5. Install @develompent and rpmdevtools.
6. try to run `rpmbuild --rebuild scap-security-guide-0.1.36-10.el7_5.src.rpm`, (there will be not installed build dependencies - install them)
7. Try to rebuild and get:

```
patching file shared/templates/template_common.py
can't find file to patch at input line 4685
Perhaps you used the wrong -p or --strip option?
The text leading up to this was:
--------------------------
|
|From 7ab3a8686f491543377be879552f4209a092b979 Mon Sep 17 00:00:00 2001
|From: =?UTF-8?q?Mat=C4=9Bj=20T=C3=BD=C4=8D?= <matyc>
|Date: Wed, 11 Apr 2018 10:27:29 +0200
|Subject: [PATCH 08/17] Improved remediations, added tests for /var/tmp noexec.
|
|---
| .../include_mount_options_functions.sh             | 11 +++++++
| shared/templates/template_BASH_mount_option        |  4 +--
| shared/templates/template_BASH_mount_option_var    |  4 +--
| .../rule_mount_option_var_tmp_bind/partition.sh    |  8 -----
| .../rule_mount_option_var_tmp_bind/runtime.pass.sh |  5 ----
| .../separate.fail.sh                               |  6 ----
| .../rule_mount_option_var_tmp_noexec/partition.sh  | 34 ++++++++++++++++++++++
| .../runtime.pass.sh                                | 10 +++++++
| .../separate.fail.sh                               | 10 +++++++
| 9 files changed, 69 insertions(+), 23 deletions(-)
| delete mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_bind/partition.sh
| delete mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_bind/runtime.pass.sh
| delete mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_bind/separate.fail.sh
| create mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_noexec/partition.sh
| create mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_noexec/runtime.pass.sh
| create mode 100644 tests/data/group_system/group_permissions/group_partitions/rule_mount_option_var_tmp_noexec/separate.fail.sh
|
|diff --git a/shared/bash_remediation_functions/include_mount_options_functions.sh b/shared/bash_remediation_functions/include_mount_options_functions.sh
|index 521f34c4b0..133b06e44c 100644
|--- a/shared/bash_remediation_functions/include_mount_options_functions.sh
|+++ b/shared/bash_remediation_functions/include_mount_options_functions.sh
--------------------------
File to patch: ^C
```

9. Try to build, rebuild, install, remove ~/rpmbuild/BUILD to get package build/rebuild working.
10. After some combinations, it works.



Actual results:
scap-security-guide && scap-security-guide-doc build/rebuild is not stable/randomly working

see attached typescript

Expected results:
scap-security-guide && scap-security-guide-doc build/rebuild is stable

Additional info:
The bug can also be found in CentOS and Scientific Linux.

https://lists.centos.org/pipermail/centos-devel/2018-October/016966.html
https://listserv.fnal.gov/scripts/wa.exe?A2=SCIENTIFIC-LINUX-DEVEL;a9741f3f.1810

ppc-055.build.eng.bos.redhat.com is built host. Unfortunately, I'm unable to provide information if the bug is x86_64 specific and won't occur on PPC.


Bests,
Alex

Comment 2 Pat Riehecky 2018-11-01 13:37:05 UTC
I show scap-security-guide-0.1.40-12 with RHEL 7.6 has similar build issues.

Comment 3 Jan Černý 2018-11-13 14:04:16 UTC
We are sorry we cannot reproduce it. If the problem is unstable patch set, we expect that we will rebase scap-security-guide in the next release and the issue will go away.


Note You need to log in before you can comment on or make changes to this bug.