[LU-8000] sanity-selinux test_3: unable to map sanityusr to unconfined_u Created: 08/Apr/16  Updated: 05/Nov/19  Resolved: 05/Nov/19

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.9.0
Fix Version/s: None

Type: Bug Priority: Minor
Reporter: Maloo Assignee: WC Triage
Resolution: Fixed Votes: 0
Labels: None
Environment:

Server/Clilent
RHEL 6.6
branch: lustre-b_ieel3_0
build: 64


Issue Links:
Related
Severity: 3
Rank (Obsolete): 9223372036854775807

 Description   

This issue was created by maloo for Saurabh Tandan <saurabh.tandan@intel.com>

This issue relates to the following test suite run: https://testing.hpdd.intel.com/test_sets/9818b678-fc82-11e5-abd3-5254006e85c2.

The sub-test test_3 failed with the following error:

unable to map sanityusr to unconfined_u

Test log:

== sanity-selinux test 3: access with unconfined user == 03:11:18 (1459998678)
/usr/lib64/lustre/tests/sanity-selinux.sh: line 183: semanage: command not found
/usr/lib64/lustre/tests/sanity-selinux.sh: line 185: semanage: command not found
/usr/lib64/lustre/tests/sanity-selinux.sh: line 188: semanage: command not found
 sanity-selinux test_3: @@@@@@ FAIL: unable to map sanityusr to unconfined_u 


 Comments   
Comment by James Nunez (Inactive) [ 19/Apr/16 ]

For el6 and (I think) el7, It looks like the semanage utility is included in policycoreutils-python:

# yum provides /usr/sbin/semanage
...
policycoreutils-python-2.0.83-24.el6.x86_64 : SELinux policy core python
                                            : utilities
Repo        : core-0
Matched from:
Filename    : /usr/sbin/semanage

policycoreutils-python-2.0.83-19.47.el6_6.1.x86_64 : SELinux policy core python
                                                   : utilities
Repo        : updates-centos6.6-x86_64
Matched from:
Filename    : /usr/sbin/semanage

So, we can either make policycoreutils-python required in our autotest environments or skip the test if semanage is not available.

So, a 'yum install policycoreutils-python' on the client node will allow these tests to work.

Comment by Charlie Olmstead [ 03/Oct/16 ]

Results with the policycoreutils-python package installed:
https://testing.hpdd.intel.com/test_sessions/41809240-897c-11e6-a9b0-5254006e85c2

Comment by Andreas Dilger [ 05/Nov/19 ]

This is no longer failing.

Generated at Sat Feb 10 02:13:45 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.