Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 513071

Summary: SELinux Preventing httpd From Starting
Product: [Community] Spacewalk Reporter: Devan Goodwin <dgoodwin>
Component: InstallationAssignee: Jan Pazdziora (Red Hat) <jpazdziora>
Status: CLOSED NOTABUG QA Contact: Devan Goodwin <dgoodwin>
Severity: medium Docs Contact:
Priority: low    
Version: 0.6CC: bperkins
Target Milestone: ---   
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-07-22 12:53:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 456554    

Description Devan Goodwin 2009-07-21 20:33:16 UTC
Description of problem:

httpd will not start with spacewalk 0.6 and SELinux set to enforcing on CentOS 5.2.

Version-Release number of selected component (if applicable):

0.6 from devel repo.

How reproducible:

100%

Steps to Reproduce:
1. Install spacewalk 0.6 on CentOS 5.2 with SELinux enforcing.
  
Actual results:

[root@sw3 ~]# service httpd start
Starting httpd:                                            [FAILED]
[root@sw3 ~]# 

[Tue Jul 21 17:29:46 2009] [error] Can't load '/usr/lib/perl5/vendor_perl/5.8.8/i386-linux-thread-multi/auto/DBD/Oracle/Oracle.s
o' for module DBD::Oracle: libocci.so.10.1: cannot open shared object file: No such file or directory at /usr/lib/perl5/5.8.8/i3
86-linux-thread-multi/DynaLoader.pm line 230.\n at /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB.pm line 539\nCompilation failed in re
quire at /usr/lib/perl5/vendor_perl/5.8.8/RHN/DB.pm line 539.\nBEGIN failed--compilation aborted at /usr/lib/perl5/vendor_perl/5
.8.8/RHN/DB.pm line 539.\nCompilation failed in require at /etc/rhn/satellite-httpd/conf/startup.pl line 5.\nBEGIN failed--compi
lation aborted at /etc/rhn/satellite-httpd/conf/startup.pl line 5.\nCompilation failed in require at (eval 2) line 1.\n
[Tue Jul 21 17:29:46 2009] [error] Can't load Perl file: /etc/rhn/satellite-httpd/conf/startup.pl for server sw3.rm-rf.ca:0, exi
ting...

And from audit.log:

type=AVC msg=audit(1248208127.035:902): avc:  denied  { search } for  pid=14987 comm="httpd" name="client" dev=dm-0 ino=3967125 scontext=root:system_r:httpd_t:s0 tcontext=user_u:object_r:user_home_t:s0 tclass=dir
type=SYSCALL msg=audit(1248208127.035:902): arch=40000003 syscall=5 success=no exit=-13 a0=b7f5d6bf a1=0 a2=bfd8940c a3=8 items=0 ppid=14986 pid=14987 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts4 ses=43 comm="httpd" exe="/usr/sbin/httpd" subj=root:system_r:httpd_t:s0 key=(null)




Additional info:

Spacewalk SELinux packages are temporarily disabled, and will need to be manually installed to reproduce this issue. See what was removed in git commit 34124fc9516ad179c88d504c4554af169a9c388d.

Comment 1 Jan Pazdziora (Red Hat) 2009-07-22 06:35:34 UTC
Can you do

# getent passwd oracle

?

Comment 2 Devan Goodwin 2009-07-22 12:25:34 UTC
oracle:x:500:500::/usr/lib/oracle/xe:/bin/bash

Comment 3 Jan Pazdziora (Red Hat) 2009-07-22 12:53:34 UTC
You seem to have missed the step

* Before installing Oracle XE

in https://fedorahosted.org/spacewalk/wiki/OracleXeSetup, referenced from https://fedorahosted.org/spacewalk/wiki/HowToInstall.

Closing as NOTABUG.