On Sat, 2016-10-15 at 13:23 +0200, Viktor Ashirov wrote:
On Thu, Oct 13 2016 at 8:46:14 pm CEST, Jenkins
<mareynol(a)redhat.com> wrote:
> See
<
http://vm-058-081.abc.idm.lab.eng.brq.redhat.com:8080/job/389-DS-COMMIT/1...
>
> Changes:
>
> [firstyear] Ticket 49006 - Enable nunc-stans by default.
With nunc-stans enabled file /dev/shm/sem.slapd-standalone.stats gets
created. And if the instance was killed, it can't clean it up because of
selinux denials:
[15/Oct/2016:06:53:03.508211988 -0400] - INFO - main - 389-Directory/1.3.6.0
B2016.288.2056 starting up
[15/Oct/2016:06:53:03.510215312 -0400] - EMERG - snmp_collator_create_semaphore - Failed
to delete old semaphore for stats file (/var/run/dirsrv/slapd-standalone.stats). Error 13
(Permission denied).
time->Sat Oct 15 06:53:03 2016
type=SYSCALL msg=audit(1476528783.509:538): arch=c000003e syscall=87 success=no exit=-13
a0=7ffccb008cf0 a1=7fe14287a7c1 a2=7fe13fee5a16 a3=7ffccb008ae0 items=0 ppid=1 pid=22093
auid=4294967295 uid=389 gid=389 euid=389 suid=389 fsuid=389 egid=389 sgid=389 fsgid=389
tty=(none) ses=4294967295 comm="ns-slapd" exe="/usr/sbin/ns-slapd"
subj=system_u:system_r:dirsrv_t:s0 key=(null)
type=AVC msg=audit(1476528783.509:538): avc: denied { unlink } for pid=22093
comm="ns-slapd" name="sem.slapd-standalone.stats"
dev="tmpfs" ino=49935 scontext=system_u:system_r:dirsrv_t:s0
tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file
And the message is misleading, because
/var/run/dirsrv/slapd-standalone.stats can be deleted, but
/dev/shm/sem.slapd-standalone.stats - can't be. I reopened 48538.
To reproduce:
py.test -v suites/basic/basic_test.py::test_basic_dse
suites/betxns/betxn_test.py::test_betxn_init
Thanks for that.
I'll use this information, and I'll follow it up on Monday morning,
--
Sincerely,
William Brown
Software Engineer
Red Hat, Brisbane