Bug 570917 - FV KVM tests causes selinux errors
Summary: FV KVM tests causes selinux errors
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Hardware Certification Program
Classification: Retired
Component: Test Suite (tests)
Version: 1.1
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
: ---
Assignee: Greg Nichols
QA Contact: Lawrence Lim
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-03-05 20:40 UTC by Rob Landry
Modified: 2014-03-26 01:08 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2010-04-21 15:59:02 UTC
Embargoed:


Attachments (Terms of Use)
patch to address image installation location for KVM (1.66 KB, patch)
2010-03-05 20:44 UTC, Rob Landry
no flags Details | Diff
fvtest.py patch - adds restorecon, leaves wget via os.system (1.38 KB, patch)
2010-03-08 13:59 UTC, Greg Nichols
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2010:0365 0 normal SHIPPED_LIVE v7 bug fix and enhancement update 2010-04-21 15:56:59 UTC

Description Rob Landry 2010-03-05 20:40:42 UTC
Description of problem:

With selinux in the required targeted enforcing mode the KVM fv_* tests will fail to run, in the permissive mode errors about invalid access from qemu to the guest images will be reported.

Version-Release number of selected component (if applicable):

rhel-5.4 GA 
  (hwcert -xen KS installed; followed by rhnregister then yum update kvm-tools)

v7-1.1-10

How reproducible:

Every time.

Steps to Reproduce:
1.Run the fv_* tests from BM kernel

Comment 1 Rob Landry 2010-03-05 20:44:52 UTC
Created attachment 398131 [details]
patch to address image installation location for KVM

Also adds the restorecon which seemed to be needed and changes an os.system to command.  Niether of these have been tested yet.  Changing the environment and performing the restorecon have been proven to work.

Comment 2 Greg Nichols 2010-03-08 13:59:35 UTC
Created attachment 398528 [details]
fvtest.py patch - adds restorecon, leaves wget via os.system

Compared to the prior patch, this patch leaves the call to "wget" in os.system.  The reason is that v7's Command class doesn't display wget's progress through to the test output, so that feedback would be lost if the test is being monitored.   Also, the logic of the test is to try multiple locations, and the "if" condition on line 186 is sufficient.

The restorecon call is added per the above patch, with a syntax correction.

Comment 3 Greg Nichols 2010-03-09 03:07:24 UTC
Committed patch to R14

Comment 4 Johnny Liu 2010-03-24 07:44:01 UTC
This bug is verified PASS with v7-1.1-22.el5 on RHEL5 i386 xen/ x86_64 kvm.

Comment 7 errata-xmlrpc 2010-04-21 15:59:02 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2010-0365.html


Note You need to log in before you can comment on or make changes to this bug.