Bug 815988 - [abrt] setroubleshoot-server-3.1.9-1.fc17: __init__.py:49:seinfo:RuntimeError: Permission denied
Summary: [abrt] setroubleshoot-server-3.1.9-1.fc17: __init__.py:49:seinfo:RuntimeError...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: setools
Version: 17
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Chris PeBenito
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:f39f263a6f1d5f01559053f6160...
: 816650 817125 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-04-24 23:52 UTC by Flóki Pálsson
Modified: 2013-02-02 15:06 UTC (History)
22 users (show)

Fixed In Version: setools-3.3.7-24.fc17
Clone Of:
Environment:
Last Closed: 2012-05-04 22:57:35 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Flóki Pálsson 2012-04-24 23:52:42 UTC
libreport version: 2.0.10
abrt_version:   2.0.10
cmdline:        /usr/bin/python -Es /usr/bin/sealert -b
comment:        open from menu. Fallback mode. language is. 
executable:     /usr/bin/sealert
kernel:         3.3.2-8.fc17.x86_64
time:           þri 24.apr 2012, 23:43:59 GMT
uid:            1000
username:       floki

backtrace:
:__init__.py:49:seinfo:RuntimeError: Permission denied
:
:Traceback (most recent call last):
:  File "/usr/bin/sealert", line 50, in <module>
:    from setroubleshoot.util import get_identity, load_plugins
:  File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
:    file_types =  setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
:  File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
:    dict_list = _seinfo.seinfo(setype, name)
:RuntimeError: Permission denied
:
:Local variables in innermost frame:
:setype: 1
:name: 'file_type'

smolt_data:
:
:
:General
:=================================
:UUID: 9aa5b3c4-7e7e-4c15-b64b-152501cb2d7d
:Kerfi:: Fedora release 17 (Beefy Miracle)
:Sjálfgefið keyrslustig (runlevel): Unknown
:Tungumál: is_IS.utf8
:Stýrikerfi: x86_64
:BogoMIPS: 5648.78
:Framleiðandi örgjörva: GenuineIntel
:Gerð örgjörva: Intel(R) Core(TM)2 Duo CPU     E8300  @ 2.83GHz
:CPU Stepping: 6
:CPU Family: 6
:CPU Model Num: 23
:Fjöldi örgjörva: 2
:Hraði örgjörva: 2833
:Kerfisminni: 2003
:Diskminni kerfis: 8078
:Framleiðandi: To Be Filled By O.E.M.
:Kerfi: To Be Filled By O.E.M. To Be Filled By O.E.M.
:Gerð móðurborðs: Desktop
:Kjarni: 3.3.2-8.fc17.x86_64
:SELinux Enabled: 1
:SELinux Policy: targeted
:SELinux Enforce: Enforcing
:MythTV Remote: Unknown
:MythTV Role: Unknown
:MythTV Theme: Unknown
:MythTV Plugin: 
:MythTV Tuner: -1
:
:
:Tæki
:=================================
:(32902:10688:6217:10688) pci, None, HOST/PCI, 82G33/G31/P35/P31 Express DRAM Controller
:(32902:10689:6217:10689) pci, pcieport, PCI/PCI, 82G33/G31/P35/P31 Express PCI Express Root Port
:(4147:404:65535:65535) pci, xhci_hcd, USB, uPD720200 USB 3.0 Host Controller
:(32902:10202:6217:10202) pci, i801_smbus, SERIAL, N10/ICH 7 Family SMBus Controller
:(32902:10177:6217:10177) pci, ahci, STORAGE, N10/ICH7 Family SATA AHCI Controller
:(32902:10207:6217:10207) pci, ata_piix, STORAGE, 82801G (ICH7 Family) IDE Controller
:(32902:10168:6217:10168) pci, None, PCI/ISA, 82801GB/GR (ICH7 Family) LPC Interface Bridge
:(4098:38341:5208:8602) pci, radeon, VIDEO, RV620 LE [Radeon HD 3450]
:(4098:43560:5208:43560) pci, snd_hda_intel, MULTIMEDIA, RV620 Audio device [Radeon HD 34xx Series]
:(32902:10185:6217:10185) pci, uhci_hcd, USB, N10/ICH 7 Family USB UHCI Controller #2
:(32902:9294:6217:9294) pci, None, PCI/PCI, 82801 PCI Bridge
:(32902:10187:6217:10187) pci, uhci_hcd, USB, N10/ICH 7 Family USB UHCI Controller #4
:(32902:10186:6217:10186) pci, uhci_hcd, USB, N10/ICH 7 Family USB UHCI Controller #3
:(4354:28675:4354:64) pci, Emu10k1_gameport, INPUT, SB Audigy Game Port
:(32902:10188:6217:10188) pci, ehci_hcd, USB, N10/ICH 7 Family USB2 EHCI Controller
:(4332:33128:6217:33128) pci, r8169, ETHERNET, Motherboard (one of many)
:(4354:16385:4354:16) pci, firewire_ohci, FIREWIRE, SB Audigy FireWire Port
:(32902:10192:6217:10192) pci, pcieport, PCI/PCI, N10/ICH 7 Family PCI Express Port 1
:(4354:4:4354:8194) pci, snd_emu10k1, MULTIMEDIA_AUDIO, SB Audigy 2 ZS (SB0350)
:(32902:10208:6217:10208) pci, pcieport, PCI/PCI, 82801GR/GH/GHM (ICH7 Family) PCI Express Port 5
:(32902:10210:6217:10210) pci, pcieport, PCI/PCI, 82801GR/GH/GHM (ICH7 Family) PCI Express Port 6
:(32902:10184:6217:10184) pci, uhci_hcd, USB, N10/ICH 7 Family USB UHCI Controller #1
:(4358:12356:6217:12356) pci, firewire_ohci, FIREWIRE, VT6306/7/8 [Fire II(M)] IEEE 1394 OHCI Controller
:
:
:Filesystem Information
:=================================
:device mtpt type bsize frsize blocks bfree bavail file ffree favail
:-------------------------------------------------------------------
:/dev/sda11 / ext4 4096 4096 4098215 2889256 2683599 1030176 878182 878182
:/dev/sdc1 WITHHELD ext3 4096 4096 59290447 6457175 3444988 15065088 15025963 15025963
:/dev/sdc1 WITHHELD ext3 4096 4096 59290447 6457175 3444988 15065088 15025963 15025963
:

Comment 1 Mikhail 2012-04-25 04:38:07 UTC
Try run SELinux Troubleshoter

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 2 Flóki Pálsson 2012-04-25 08:36:43 UTC
>Try run SELinux Troubleshoter
It shows up in bottom bar and disappears. No window.

Form terminal 
[floki@F17rc4 ~]$ /usr/bin/sealert -b
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/usr/bin/sealert", line 50, in <module>
    from setroubleshoot.util import get_identity, load_plugins
  File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
    file_types =  setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
  File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
    dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Permission denied
[floki@F17rc4 ~]$ 


as root

# /usr/bin/sealert -b
ERROR: policydb magic number 0x000008 does not match expected magic number 0xf97cff8c or 0xf97cff8d
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/usr/bin/sealert", line 50, in <module>
    from setroubleshoot.util import get_identity, load_plugins
  File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
    file_types =  setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
  File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
    dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Success
[root@F17rc4 ~]#

Comment 3 Frank Murphy 2012-04-26 12:22:27 UTC
I clicked on "Selinux Troubleshooter" in the menu.

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 4 Stef Walter 2012-04-26 13:20:37 UTC
Clicked on the sealert icon in my notification area.

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 5 Dag Odenhall 2012-04-26 15:35:38 UTC
When starting SELinux Troubleshooter from the GNOME Shell.

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 6 Miroslav Grepl 2012-04-27 11:23:20 UTC
*** Bug 816650 has been marked as a duplicate of this bug. ***

Comment 7 Frank Murphy 2012-04-27 12:12:11 UTC
Getting similar now in F18\Rawhide will I create new bug, or add here?

Comment 8 Daniel Walsh 2012-04-27 14:54:56 UTC
This is actually an setools and kernel issue.  But I will revert setools package until the kernel fix has  been pushed.

Comment 9 Miroslav Grepl 2012-04-27 20:15:53 UTC
*** Bug 817125 has been marked as a duplicate of this bug. ***

Comment 10 Mikhail 2012-04-28 08:09:20 UTC
Just run SELinux Troubleshoter

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 11 john 2012-04-28 20:08:02 UTC
VPN fails to work so tried to look in troubleshooter to see if this was the cause. Refused to work.

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 12 Mikhail 2012-04-29 05:24:40 UTC
just run SELinux Troubleshoter

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 13 alberto 2012-04-30 08:48:42 UTC
Nothing to say.

Package: setroubleshoot-server-3.1.9-1.fc17
Architecture: i686
OS Release: Fedora release 17 (Beefy Miracle)

Comment 14 dennis 2012-04-30 11:26:45 UTC
I started the Selinux Troubleshooter, latest updates as of 30-04-2012 on fc17
Seems to skip gksu. Kernel is built from source with one changed setting the rest is fefora default (CONFIG_INTEL_IOMMU_DEFAULT_ON)


Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 15 Michel Lind 2012-05-01 04:48:16 UTC
Trying to run sealert manually (without waiting for a SELinux alert)

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 16 dennis 2012-05-01 11:07:53 UTC
When i run manually i get the following:
$ sealert
ERROR: Unable to open policy /sys/fs/selinux/policy.
Traceback (most recent call last):
  File "/usr/bin/sealert", line 50, in <module>
    from setroubleshoot.util import get_identity, load_plugins
  File "/usr/lib64/python2.7/site-packages/setroubleshoot/util.py", line 283, in <module>
    file_types =  setools.seinfo(setools.ATTRIBUTE,"file_type")[0]["types"]
  File "/usr/lib64/python2.7/site-packages/setools/__init__.py", line 49, in seinfo
    dict_list = _seinfo.seinfo(setype, name)
RuntimeError: Permission denied

Comment 17 Joshua 2012-05-01 13:09:12 UTC
Abrt pops up with this every time I log into KDE

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 18 Daniel Walsh 2012-05-01 19:59:34 UTC
Please revert your version of setools

yum distro-sync setools

Comment 19 Joshua 2012-05-02 13:10:54 UTC
I get no help from distro-sync.

Name        : setools
Arch        : x86_64
Version     : 3.3.7
Release     : 22.fc17
Size        : 13 k
Repo        : fedora

"No Packages marked for Distribution Synchronization"

Comment 20 Daniel Walsh 2012-05-02 19:11:07 UTC
rpm -q setools

Comment 21 Fedora Update System 2012-05-02 19:51:44 UTC
setools-3.3.7-24.fc17 has been submitted as an update for Fedora 17.
https://admin.fedoraproject.org/updates/setools-3.3.7-24.fc17

Comment 22 Mark Harig 2012-05-03 06:51:48 UTC
I entered the command 'sudo sealert -l' at a bash shell prompt.

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 23 Frank Murphy 2012-05-03 10:23:38 UTC
Works but in cli\gui get:
# sealert
WARNING: Policy would be downgraded from version 27 to 26
(then window opens)

Comment 24 Fedora Update System 2012-05-03 15:58:50 UTC
Package setools-3.3.7-24.fc17:
* should fix your issue,
* was pushed to the Fedora 17 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing setools-3.3.7-24.fc17'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2012-7191/setools-3.3.7-24.fc17
then log in and leave karma (feedback).

Comment 25 David Klann 2012-05-03 17:05:04 UTC
Simply logging in after "yum update" and a reboot seems to have caused this error.
Note that sealert was not running after receiving this error.


Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 26 David Klann 2012-05-03 17:21:39 UTC
Additional note: I did not have plain "setools" package installed. I had setools-libs and setools-libs-python (this was originally a fresh F17 install). I uninstalled setools-libs and setools-libs-python (and all their dependants), then installed setools.

I then installed selinux and re-installed the previously-removed dependants. Here's what yum chose for me:

yum install setools
 - setools.x86_64 0:3.3.7-22.fc17
   Dependencies:
 - bwidget.noarch 0:1.9.0-3.fc17
 - setools-console.x86_64 0:3.3.7-22.fc17
 - setools-gui.x86_64 0:3.3.7-22.fc17
 - setools-libs.x86_64 0:3.3.7-22.fc17
 - setools-libs-tcl.x86_64 0:3.3.7-22.fc17

yum install setroubleshoot policycoreutils-python policycoreutils-sandbox setroubleshoot-plugins setroubleshoot-server
 - policycoreutils-python.x86_64 0:2.1.11-6.fc17
 - policycoreutils-sandbox.x86_64 0:2.1.11-6.fc17
 - setroubleshoot.x86_64 0:3.1.9-1.fc17
 - setroubleshoot-plugins.noarch 0:3.0.38-1.fc17
 - setroubleshoot-server.x86_64 0:3.1.9-1.fc17

I then launched "SELinux Troubleshooter" from GNOME Shell and it did not crash.

Comment 27 David Klann 2012-05-03 17:26:02 UTC
Oh, and I was then able to create and run a new VM using virt-manager.

Comment 28 Ulrich Drepper 2012-05-04 13:13:24 UTC
This happened without any intervention of a freshly-installed F17 system.

Package: setroubleshoot-server-3.1.9-1.fc17
OS Release: Fedora release 17 (Beefy Miracle)

Comment 29 Fedora Update System 2012-05-04 22:57:35 UTC
setools-3.3.7-24.fc17 has been pushed to the Fedora 17 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 30 dennis 2012-05-05 01:16:05 UTC
Seems to be fixed now i just get the following when i start sealert from the cli:

$ sealert 
WARNING: Policy would be downgraded from version 27 to 26.

** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GMountMountFlags' as enum when in fact it is of type 'GFlags'

** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GDriveStartFlags' as enum when in fact it is of type 'GFlags'

** (setroubleshoot:2209): WARNING **: Trying to register gtype 'GSocketMsgFlags' as enum when in fact it is of type 'GFlags'
Gtk-Message: Failed to load module "pk-gtk-module"

Not sure if this is a problem that only happens after this upgrade and thus not happens when doing a clean install, either way i thought i'd mention it.


Note You need to log in before you can comment on or make changes to this bug.