Bug 772556 - vdsm installation fails when selinux is disabled
Summary: vdsm installation fails when selinux is disabled
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: vdsm
Version: 6.2
Hardware: Unspecified
OS: Unspecified
urgent
urgent
Target Milestone: rc
: ---
Assignee: Dan Kenigsberg
QA Contact: Jakub Libosvar
URL:
Whiteboard:
Depends On:
Blocks: 782100
TreeView+ depends on / blocked
 
Reported: 2012-01-09 08:30 UTC by Ohad Levy
Modified: 2022-07-09 05:33 UTC (History)
9 users (show)

Fixed In Version: v4.9.2-85-g75e97e9
Doc Type: Bug Fix
Doc Text:
VDSM previously always attempted to update SELinux attributes, even when SELinux was disabled. This caused the installation to fail. The installation process has been modified to ensure that SELinux attributes are only modified if SELinux is enabled. This ensures that installation is still able to complete successfully when SELinux is disabled.
Clone Of:
Environment:
Last Closed: 2012-12-04 18:52:26 UTC
Target Upstream Version:

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2012:1508 0 normal SHIPPED_LIVE Important: rhev-3.1.0 vdsm security, bug fix, and enhancement update 2012-12-04 23:48:05 UTC

Description Ohad Levy 2012-01-09 08:30:27 UTC 
Description of problem:

when selinux is disabled (not permissive) vdsm installation fails.


How reproducible:
100%

Steps to Reproduce:
1. disable selinux in /etc/selinux/config
2.install vdsm via ovirt.
3.
  
Actual results:
Sun, 08 Jan 2012 19:31:20 DEBUG    handleSSHKey start
Sun, 08 Jan 2012 19:31:20 DEBUG    handleSSHKey: failed to chmod authorized_keys
Traceback (most recent call last):
  File "/tmp/deployUtil.py", line 602, in handleSSHKey
    selinux.restorecon(P_ROOT_AUTH_KEYS)
  File "/usr/lib64/python2.7/site-packages/selinux/__init__.py", line 84, in restorecon
    status, oldcontext = lgetfilecon(path)

Expected results:

if selinux is not running, I would not try to change any selinux attributes.
Additional info:
Comment 1 Dan Kenigsberg 2012-01-09 10:56:55 UTC 
Setting severity to high as this is an unexpected behavior introduced in 3.0.0 (0day) while fixing bug 746766.
Comment 2 Dan Kenigsberg 2012-01-12 14:08:16 UTC 
http://gerrit.ovirt.org/1022
Comment 4 Stephen Gordon 2012-02-09 16:42:49 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
VDSM previously always attempted to update SELinux attributes, even when SELinux was disabled. This caused the installation to fail. 

The installation process has been modified to ensure that SELinux attributes are only modified if SELinux is enabled. This ensures that installation is still able to complete successfully when SELinux is disabled.
Comment 6 Dafna Ron 2012-03-27 13:52:29 UTC 
verified on vdsm-4.9.6-4.5.x86_64
Comment 8 errata-xmlrpc 2012-12-04 18:52:26 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHSA-2012-1508.html
Note You need to log in before you can comment on or make changes to this bug.