Bug 787780 - [abrt] setroubleshoot-server-3.1.2-1.fc16: catchall_boolean.py:66:get_then_text:IndexError: tuple index out of range
Summary: [abrt] setroubleshoot-server-3.1.2-1.fc16: catchall_boolean.py:66:get_then_te...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: setroubleshoot
Version: 16
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:7091ad82bb84cd19c5f4f5c76b4...
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-02-06 17:45 UTC by Michael Stahl
Modified: 2012-05-20 23:53 UTC (History)
18 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-05-20 23:53:50 UTC
Type: ---
Embargoed:
mstahl: needinfo-


Attachments (Terms of Use)

Description Michael Stahl 2012-02-06 17:45:01 UTC
libreport version: 2.0.8
abrt_version:   2.0.7
cmdline:        /usr/bin/python -Es /usr/bin/sealert -s
comment:        looking at this setroubleshoot thingy
executable:     /usr/bin/sealert
kernel:         3.2.3-2.fc16.x86_64
reason:         catchall_boolean.py:66:get_then_text:IndexError: tuple index out of range
time:           Mon 06 Feb 2012 18:42:35 CET
uid:            1000
username:       ms

backtrace:
:catchall_boolean.py:66:get_then_text:IndexError: tuple index out of range
:
:Traceback (most recent call last):
:  File "/usr/lib64/python2.7/site-packages/setroubleshoot/browser.py", line 771, in on_previous_button_clicked
:    self.show_current_alert()
:  File "/usr/lib64/python2.7/site-packages/setroubleshoot/browser.py", line 744, in show_current_alert
:    rb = self.add_row(p, alert, args)
:  File "/usr/lib64/python2.7/site-packages/setroubleshoot/browser.py", line 391, in add_row
:    then_text = alert.substitute(plugin.get_then_text(avc, args))
:  File "/usr/share/setroubleshoot/plugins/catchall_boolean.py", line 66, in get_then_text
:    if os.path.isfile("/usr/share/man/man8/%s_selinux.8.gz" % args[2].split("_")[0]) and args[2] != "":
:IndexError: tuple index out of range
:
:Local variables in innermost frame:
:self: <plugins.catchall_boolean.plugin object at 0x469e3d0>
:args: ('allow_polyinstantiation', '1')
:avc: [<setroubleshoot.audit_data.AuditRecord object at 0x458e310>, <setroubleshoot.audit_data.AuditRecord object at 0x458e350>]

Comment 1 emoziko 2012-03-04 15:01:13 UTC
I clicked Details button in Selinux Alert Browser. 

Package: setroubleshoot-server-3.1.3-1.fc16
Architecture: i686
OS Release: Fedora release 16 (Verne)

Comment 2 Miroslav Grepl 2012-03-05 12:48:39 UTC
Yes, there is a bug.

Comment 3 Miroslav Grepl 2012-03-05 13:07:38 UTC
Ok, I found it.

Comment 4 Miroslav Grepl 2012-03-06 15:59:44 UTC
emoziko,
what is your version of setroubleshoot-plugins

$ rpm -q setroubleshoot-plugins

Comment 5 Otso Helenius 2012-03-31 15:44:01 UTC
I logged in, abrt popped up.

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 6 Daniel Walsh 2012-04-02 20:14:19 UTC
Miroslav have you got this one? Is this broken in Fedora 17?  If so lets fix there and back port.

Comment 7 GuL 2012-04-03 17:52:30 UTC
I was checking the SELinux alerts and analysing former and next alerts

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 8 Lester 2012-04-04 01:24:38 UTC
I was trying to look at a problem in setroubleshoot.  When I clicked on details, nothing came up.  Unfortunately, I deleted the description before I noticed this bug report.

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 9 igor.redhat@gmail.com 2012-04-20 23:59:21 UTC
This happened when running sudo yum upgrade (NetworkManager was being upgraded to 0.9.2-1 as part of this). The following SELinux warning popped during the upgrade, followed by this abrtd message:

SELinux is preventing /usr/sbin/NetworkManager from read access on the file /etc/sysctl.conf.

*****  Plugin catchall (100. confidence) suggests  ***************************

If you believe that NetworkManager should be allowed read access on the sysctl.conf file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep NetworkManager /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context                system_u:system_r:NetworkManager_t:s0
Target Context                system_u:object_r:system_conf_t:s0
Target Objects                /etc/sysctl.conf [ file ]
Source                        NetworkManager
Source Path                   /usr/sbin/NetworkManager
Port                          <Unknown>
Host                          igor-hp
Source RPM Packages           NetworkManager-0.9.4-2.git20120403.fc16.x86_64
Target RPM Packages           initscripts-9.34.2-1.fc16.x86_64
Policy RPM                    selinux-policy-3.10.0-80.fc16.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     igor-hp
Platform                      Linux igor-hp 3.3.1-5.fc16.x86_64 #1 SMP Tue Apr
                              10 19:56:52 UTC 2012 x86_64 x86_64
Alert Count                   2
First Seen                    Fri 20 Apr 2012 07:55:43 PM EDT
Last Seen                     Fri 20 Apr 2012 07:55:46 PM EDT
Local ID                      7f0d55af-9915-4df3-b3e0-b09ca060365b

Raw Audit Messages
type=AVC msg=audit(1334966146.687:448): avc:  denied  { read } for  pid=13357 comm="NetworkManager" name="sysctl.conf" dev="sda5" ino=376246 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:system_conf_t:s0 tclass=file


type=SYSCALL msg=audit(1334966146.687:448): arch=x86_64 syscall=open success=no exit=EACCES a0=4c8172 a1=0 a2=0 a3=11 items=0 ppid=1 pid=13357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=NetworkManager exe=/usr/sbin/NetworkManager subj=system_u:system_r:NetworkManager_t:s0 key=(null)

Hash: NetworkManager,NetworkManager_t,system_conf_t,file,read

audit2allow

#============= NetworkManager_t ==============
allow NetworkManager_t system_conf_t:file read;

audit2allow -R

#============= NetworkManager_t ==============
allow NetworkManager_t system_conf_t:file read;





Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 10 Daniel Walsh 2012-04-22 11:50:08 UTC
I see this rule in selinux-policy-3.10.0-85.fc16

Comment 11 Miroslav Grepl 2012-04-22 19:19:05 UTC
Yes, this is fixed in the latest F16 policy which is in the stable repo.

Comment 12 Alen Siljak 2012-04-25 07:40:52 UTC
Opened alerts window with two notifications. Deleted one and then this error poped out.

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 13 Miroslav Grepl 2012-04-25 11:26:47 UTC
You mean the original error from the comment #1.

Comment 14 Alen Siljak 2012-04-25 11:31:31 UTC
Hi, Miroslav. The above was posted through an automatic bug submission in Fedora 16. I am not sure whether the error message is the same but it does look like it.
Now I already cleared the alert queue but will report more info if it happens again.
Cheers

Comment 15 Alen Siljak 2012-04-25 11:34:19 UTC
Opened SELinux Alert Browser, clicked List All Alerts.
In the SETroubleshoot Alert List selected a fourth notification out of seven and clicked Delete.


Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 16 Alen Siljak 2012-04-25 11:36:05 UTC
So, some index seems to be wrong after a notification is deleted.

Comment 18 Michael Stahl 2012-04-26 10:13:34 UTC
sorry don't have a F17 system to test this on;
furthermore can't even reproduce this on F16
by randomly clicking on things;
no idea what i had done to get this crash.

Comment 19 Miroslav Grepl 2012-04-26 13:47:37 UTC
I apologize, I missed this is on F16 system.

Comment 20 Rob Wills 2012-05-05 19:43:53 UTC
I was trying to troubleshoot an issue within the SEtroubleshooter.

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 21 Miroslav Grepl 2012-05-07 09:53:34 UTC
It has been fixed in F17. We need to backport it to F16.

Comment 22 Daniel Walsh 2012-05-07 14:28:12 UTC
Fixed in setroubleshoot-plugins-3.0.38-1.fc16

Comment 23 Gianluca 2012-05-07 21:21:16 UTC
(In reply to comment #22)
> Fixed in setroubleshoot-plugins-3.0.38-1.fc16

where I can find this updated version of setroubleshoot-plugins? after my latest yum update I have:

[root@gianluca gianluca]# yum list setroublesho*
Loaded plugins: langpacks, presto, refresh-packagekit
Installed Packages
setroubleshoot.i686                                         3.1.3-1.fc16                                @updates
setroubleshoot-plugins.noarch                               3.0.27-1.fc16                               @updates
setroubleshoot-server.i686                                  3.1.3-1.fc16                                @updates
Available Packages
setroubleshoot-doc.i686                                     3.1.3-1.fc16                                updates

Comment 24 Fedora Update System 2012-05-08 14:35:16 UTC
setroubleshoot-plugins-3.0.38-1.fc16 has been submitted as an update for Fedora 16.
https://admin.fedoraproject.org/updates/setroubleshoot-plugins-3.0.38-1.fc16

Comment 25 Emmett Culley 2012-05-09 13:57:04 UTC
I was attempting to enable setting date and time automatically via KDE system setup.  The alert dialog poped up and a notice that it wasn't able to contact pool.ntp.org.  I was connected to the Intrnet in the usual manner.

Package: setroubleshoot-server-3.1.3-1.fc16
OS Release: Fedora release 16 (Verne)

Comment 26 Daniel Walsh 2012-05-09 17:12:04 UTC
Emmett please open a separate bug, this looks like a policy issue, not an issue with the tool.

Comment 27 emoziko 2012-05-09 19:11:13 UTC
I was deleting alerts

Package: setroubleshoot-server-3.1.3-1.fc16
Architecture: i686
OS Release: Fedora release 16 (Verne)

Comment 28 Fedora Update System 2012-05-10 14:21:59 UTC
Package setroubleshoot-plugins-3.0.38-1.fc16:
* should fix your issue,
* was pushed to the Fedora 16 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing setroubleshoot-plugins-3.0.38-1.fc16'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-7542/setroubleshoot-plugins-3.0.38-1.fc16
then log in and leave karma (feedback).

Comment 29 Tony 2012-05-14 10:03:08 UTC
Just logged in into F16

Package: setroubleshoot-server-3.1.3-1.fc16
Architecture: i686
OS Release: Fedora release 16 (Verne)

Comment 30 Fedora Update System 2012-05-20 23:53:50 UTC
setroubleshoot-plugins-3.0.38-1.fc16 has been pushed to the Fedora 16 stable repository.  If problems still persist, please make note of it in this bug report.


Note You need to log in before you can comment on or make changes to this bug.