On Sat, 2016-10-15 at 13:23 +0200, Viktor Ashirov wrote: > On Thu, Oct 13 2016 at 8:46:14 pm CEST, Jenkins <mareynol@xxxxxxxxxx> wrote: > > See <http://vm-058-081.abc.idm.lab.eng.brq.redhat.com:8080/job/389-DS-COMMIT/117/changes> > > > > Changes: > > > > [firstyear] Ticket 49006 - Enable nunc-stans by default. > > With nunc-stans enabled file /dev/shm/sem.slapd-standalone.stats gets > created. And if the instance was killed, it can't clean it up because of > selinux denials: > > [15/Oct/2016:06:53:03.508211988 -0400] - INFO - main - 389-Directory/1.3.6.0 B2016.288.2056 starting up > [15/Oct/2016:06:53:03.510215312 -0400] - EMERG - snmp_collator_create_semaphore - Failed to delete old semaphore for stats file (/var/run/dirsrv/slapd-standalone.stats). Error 13 (Permission denied). > > time->Sat Oct 15 06:53:03 2016 > type=SYSCALL msg=audit(1476528783.509:538): arch=c000003e syscall=87 success=no exit=-13 a0=7ffccb008cf0 a1=7fe14287a7c1 a2=7fe13fee5a16 a3=7ffccb008ae0 items=0 ppid=1 pid=22093 auid=4294967295 uid=389 gid=389 euid=389 suid=389 fsuid=389 egid=389 sgid=389 fsgid=389 tty=(none) ses=4294967295 comm="ns-slapd" exe="/usr/sbin/ns-slapd" subj=system_u:system_r:dirsrv_t:s0 key=(null) > type=AVC msg=audit(1476528783.509:538): avc: denied { unlink } for pid=22093 comm="ns-slapd" name="sem.slapd-standalone.stats" dev="tmpfs" ino=49935 scontext=system_u:system_r:dirsrv_t:s0 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=file > > And the message is misleading, because > /var/run/dirsrv/slapd-standalone.stats can be deleted, but > /dev/shm/sem.slapd-standalone.stats - can't be. I reopened 48538. > > To reproduce: > py.test -v suites/basic/basic_test.py::test_basic_dse suites/betxns/betxn_test.py::test_betxn_init > Thanks for that. I'll use this information, and I'll follow it up on Monday morning, -- Sincerely, William Brown Software Engineer Red Hat, Brisbane
Attachment:
signature.asc
Description: This is a digitally signed message part
_______________________________________________ 389-devel mailing list -- 389-devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to 389-devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
