Bug 2166633 - rpmdb-migrate.service crashes after selinux AVC
Summary: rpmdb-migrate.service crashes after selinux AVC
Keywords:
Status: CLOSED DUPLICATE of bug 2164752
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Zdenek Pytela
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-02-02 13:30 UTC by Zbigniew Jędrzejewski-Szmek
Modified: 2023-02-03 13:45 UTC (History)
7 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2023-02-03 13:45:52 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)

Description Zbigniew Jędrzejewski-Szmek 2023-02-02 13:30:21 UTC
Description of problem:
On a freshly updated rawhide machine:

Reached target sockets.target - Socket Units.
Starting rpmdb-migrate.service - RPM database migration to /usr...
AVC avc:  denied  { map } for  pid=670 comm="rpmdb_migrate" path="/usr/bin/bash" dev="vda2" ino=124799 scontext=system_u:system_r:rpmdb_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=0
ANOM_ABEND auid=4294967295 uid=0 gid=0 ses=4294967295 subj=system_u:system_r:rpmdb_t:s0 pid=670 comm="rpmdb_migrate" exe="/usr/bin/bash" sig=11 res=1
rpmdb-rebuild.service - RPM database rebuild was skipped because of an unmet condition check (ConditionPathExists=/usr/lib/sysimage/rpm/.rebuilddb).
systemd-pcrphase-sysinit.service - TPM2 PCR Barrier (Initialization) was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f).
rpmdb-migrate.service: Main process exited, code=killed, status=11/SEGV
rpmdb-migrate.service: Failed with result 'signal'.
Failed to start rpmdb-migrate.service - RPM database migration to /usr.


Version-Release number of selected component (if applicable):
rpm-4.18.0-10.fc38.x86_64
selinux-policy-38.6-1.fc38.noarch

How reproducible:
Deterministic. I happens every time I start rpmdb-migrate.service.

Steps to Reproduce:
1. Just boot or call 'systemctl start rpmdb-migrate'.

Comment 1 Zbigniew Jędrzejewski-Szmek 2023-02-02 13:30:44 UTC
I forgot to write that there's no coredump captured.

Comment 2 Zdenek Pytela 2023-02-02 14:12:41 UTC
I think this is a dup of bz#2164752, a new F37 build should be available today.

Comment 3 Zdenek Pytela 2023-02-03 13:45:52 UTC

*** This bug has been marked as a duplicate of bug 2164752 ***


Note You need to log in before you can comment on or make changes to this bug.