Bug 806106 - Need better error than: 'Could not allocate dynamic translator buffer' when tcg execmem is blocked by selinux
Summary: Need better error than: 'Could not allocate dynamic translator buffer' when t...
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: qemu
Version: 19
Hardware: All
OS: Linux
unspecified
low
Target Milestone: ---
Assignee: Fedora Virtualization Maintainers
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
: 753589 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-03-22 21:53 UTC by Orion Poplawski
Modified: 2013-09-09 14:06 UTC (History)
20 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2013-09-09 14:01:51 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Orion Poplawski 2012-03-22 21:53:08 UTC
Description of problem:

Trying to build a arm guest I get:

Unable to complete install: 'internal error Process exited while reading console log output: char device redirected to /dev/pts/2
Could not allocate dynamic translator buffer
'

Traceback (most recent call last):
  File "/usr/share/virt-manager/virtManager/asyncjob.py", line 45, in cb_wrapper
    callback(asyncjob, *args, **kwargs)
  File "/usr/share/virt-manager/virtManager/create.py", line 1911, in do_install
    guest.start_install(False, meter=meter)
  File "/usr/lib/python2.7/site-packages/virtinst/Guest.py", line 1239, in start_install
    noboot)
  File "/usr/lib/python2.7/site-packages/virtinst/Guest.py", line 1307, in _create_guest
    dom = self.conn.createLinux(start_xml or final_xml, 0)
  File "/usr/lib/python2.7/site-packages/libvirt.py", line 2413, in createLinux
    if ret is None:raise libvirtError('virDomainCreateLinux() failed', conn=self)
libvirtError: internal error Process exited while reading console log output: char device redirected to /dev/pts/2
Could not allocate dynamic translator buffer


This is caused by:

type=AVC msg=audit(1332452726.155:640): avc:  denied  { execmem } for  pid=4962 comm="qemu-system-arm" scontext=system_u:system_r:svirt_t:s0:c171,c920 tcontext=system_u:system_r:svirt_t:s0:c171,c920 tclass=process

Solution is:

setsebool -P virt_use_execmem=on


But this error message isn't very helpful.
Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Cole Robinson 2012-06-07 21:42:29 UTC
Maybe we can get something explicit out of qemu like 'execmem failed' or something, that might lead people to think selinux.

Comment 2 Cole Robinson 2012-07-10 10:48:26 UTC
*** Bug 753589 has been marked as a duplicate of this bug. ***

Comment 3 Richard W.M. Jones 2013-01-17 18:18:10 UTC
This is indeed a very obscure error message.  I just confirmed
that it still affects Rawhide.

Comment 4 Fedora End Of Life 2013-04-03 17:57:26 UTC
This bug appears to have been reported against 'rawhide' during the Fedora 19 development cycle.
Changing version to '19'.

(As we did not run this process for some time, it could affect also pre-Fedora 19 development
cycle bugs. We are very sorry. It will help us with cleanup during Fedora 19 End Of Life. Thank you.)

More information and reason for this action is here:
https://fedoraproject.org/wiki/BugZappers/HouseKeeping/Fedora19

Comment 5 Cole Robinson 2013-09-09 14:01:51 UTC
Actually rawhide doesn't seem to be affected by this anymore, I have virt_use_execmem=off and no selinux warnings starting arm guests, so closing

Comment 6 Daniel Berrangé 2013-09-09 14:06:21 UTC
The reason you don't see this is that we added a new 'svirt_tcg_t' domain type for TCG mode, which allows execmem. Libvirt will thus do the right thing. If you query the live XML you ought to see this svirt_tcg_t in use.


Note You need to log in before you can comment on or make changes to this bug.