Bug 858832 - Sanlock service cannot start due to SELinux
Summary: Sanlock service cannot start due to SELinux
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 17
Hardware: ppc64
OS: Linux
unspecified
unspecified
Target Milestone: ---
Assignee: Miroslav Grepl
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2012-09-19 18:54 UTC by Rodrigo Trujillo
Modified: 2012-09-24 13:22 UTC (History)
10 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2012-09-24 13:22:39 UTC
Type: Bug
Embargoed:


Attachments (Terms of Use)
Logs from messages and audit.log (2.33 KB, application/octet-stream)
2012-09-19 18:54 UTC, Rodrigo Trujillo
no flags Details

Description Rodrigo Trujillo 2012-09-19 18:54:28 UTC
Created attachment 614528 [details]
Logs from messages and audit.log

Description of problem:
Sanlock tries to start but then fails. The problem seems to be caused by selinux, because if it is in permissive state, the service starts properly.


Version-Release number of selected component (if applicable):

sanlock-2.4-2.fc17.ppc64
sanlock-python-2.4-2.fc17.ppc64
sanlock-lib-2.4-2.fc17.ppc64

selinux-policy-3.10.0-130.fc17.noarch
libselinux-2.1.10-3.fc17.ppc64
libselinux-utils-2.1.10-3.fc17.ppc64
selinux-policy-targeted-3.10.0-130.fc17.noarch
selinux-policy-devel-3.10.0-130.fc17.noarch
libselinux-python-2.1.10-3.fc17.ppc64


How reproducible:
Any time, if SELinux is in enforcing mode


Steps to Reproduce:
1. Set SELinux to enforcing mode
2. Start sanlock service
3.
  
Actual results:
Service does not start


Expected results:
Sanlock service up and running


Additional info:
See logs attached.

Comment 1 Yaniv Bronhaim 2012-09-20 10:48:08 UTC
i also get an error while trying to start sanlock service:
service sanlock status shows:

sanlock daemon started 2.4 aio 1 10 renew 20 80 host 885008f5-17dc...348127889
set scheduler RR|RESET_ON_FORK priority 99 failed: Operation not permitted
wdmd connect failed for watchdog handling

Comment 2 David Teigland 2012-09-20 14:35:54 UTC
I'd check if there is a newer selinux build you could try out.

Comment 3 David Teigland 2012-09-20 15:44:53 UTC
You can refer to bug 831908 where we're getting the selinux policy fixed in RHEL.  Similar changes will probably be needed here.

Comment 4 Rodrigo Trujillo 2012-09-21 19:52:43 UTC
I just tested these selinux-policy packages new version and my problem is fixed:
http://ppc.koji.fedoraproject.org/koji/taskinfo?taskID=712848


Note You need to log in before you can comment on or make changes to this bug.