Bug 1925616 - a candlepin SELinux denial that can appear when doing a change hostname sometimes
Summary: a candlepin SELinux denial that can appear when doing a change hostname somet...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Satellite
Classification: Red Hat
Component: SELinux
Version: 6.9.0
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: 6.9.0
Assignee: Jonathon Turel
QA Contact: Peter Ondrejka
URL:
Whiteboard:
Depends On:
Blocks: 1677872
TreeView+ depends on / blocked
 
Reported: 2021-02-05 16:53 UTC by Devendra Singh
Modified: 2021-07-22 08:22 UTC (History)
13 users (show)

Fixed In Version: katello-selinux-3.5.1
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1897360
Environment:
Last Closed: 2021-04-21 13:10:31 UTC
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Foreman Issue Tracker 31499 0 Normal Closed Allow tomcat name_connect to katello_candlepin_port_t 2021-02-20 02:03:14 UTC
Red Hat Product Errata RHSA-2021:1313 0 None None None 2021-04-21 13:10:57 UTC

Comment 2 Jonathon Turel 2021-02-05 20:41:59 UTC 
Connecting redmine issue https://projects.theforeman.org/issues/31499 from this bug
Comment 3 Peter Ondrejka 2021-03-01 12:24:18 UTC 
Automation is still seeing the candlepin_events issue on snap 15 when attempting to run satellite-change-hostname
Comment 4 Jonathon Turel 2021-03-01 16:25:56 UTC 
Hi Peter, that is surprising to me! On my Snap 15 I don't see any problems after using satellite-change-hostname. I need to learn more about your setup to get to the root of the problem and a box I can log in to that's exhibiting the issue would be ideal. My assumption is that you installed a fresh snap 15, changed the hostname w/ sat-change-hostname and saw the failure in 'hammer ping'. If that's not accurate please share as much detail as possible in terms of how your setup has diverged from my assumption. Thank you
Comment 5 Peter Ondrejka 2021-03-02 15:08:02 UTC 
Hey, it was an automation run that was supposed to do what you describe, but looking closer at the results it turns out that candlepin_events were already dead when rename started, so it is the initial health check ping that fails. It could be due to some interference with other tests, will investigate more, but I consider it not a blocker for this bz
Comment 6 Sudhir Mallamprabhakara 2021-03-16 03:10:47 UTC 
Peter - clone of this BZ is marked Verified. Any updates from your investigation??
Comment 7 Peter Ondrejka 2021-03-24 08:26:13 UTC 
Verified in snap 18 via automation, s-c-h no longer hits the aforementioned issue
Comment 11 errata-xmlrpc 2021-04-21 13:10:31 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Moderate: Satellite 6.9 Release), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2021:1313
Note You need to log in before you can comment on or make changes to this bug.