Hide Forgot
Description of problem: I always get avc problem in /distribution/install phase on s390x. type=SYSCALL msg=audit(1334561765.866:17): arch=80000016 syscall=11 per=400000 success=yes exit=11 a0=803ce830 a1=803ceff0 a2=803ccd40 a3=3fffd229910 items=0 ppid=4773 pid=4774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="semodule" exe="/usr/sbin/semodule" subj=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1334561765.866:17): avc: denied { append } for pid=4774 comm="semodule" path="/mnt/testarea/TESTOUT.log" dev=dm-0 ino=392476 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mnt_t:s0 tclass=file type=AVC msg=audit(1334561765.866:17): avc: denied { append } for pid=4774 comm="semodule" path="/mnt/testarea/selinux.log" dev=dm-0 ino=392489 scontext=unconfined_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mnt_t:s0 tclass=file Fail: AVC messages found. Checking for errors... More info in fail run https://beaker.engineering.redhat.com/recipes/464497 Version-Release number of selected component (if applicable): How reproducible: always with tcms run 35913 Steps to Reproduce: 1.bkr workflow-tcms --arch s390 --errata 2012:12650 --run 35913 Actual results: avc problem in /distribution/install phase Expected results: no avc problem
The problem is that we are running out of memory when trying to insert the test policy in selinux. I'm not sure what we can do other than require a system with more memory. The s390's are hit because they only have 512 meg of memory. (some s390 systems have 1gig)
*** Bug 813342 has been marked as a duplicate of this bug. ***
There was a change to autopart in 6.3 version of anaconda which creates a swap partition the same size as memory. Before 6.3 it would create it twice the size of memory, this change is enough to cause out of memory issues with 6.3. see bz744129
I haven't seen this in a while. David, is it still an issue? (and I've schedulled the job you mention in c#0 and there's no AVC in /distribution/install)
Ales, I try schedulle job too, but I haven't seen this now.