Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.

Bug 1010472

Summary: rhevm-log-collector hangs when running ausearch command from sos selinux plugin
Product: Red Hat Enterprise Virtualization Manager Reporter: Derrick Ornelas <dornelas>
Component: ovirt-engine-log-collectorAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED ERRATA QA Contact: sefi litmanovich <slitmano>
Severity: high Docs Contact:
Priority: high    
Version: 3.2.0CC: acathrow, ecohen, eedri, iheim, jamills, kcleveng, mkalinin, oschreib, pstehlik, Rhev-m-bugs, scohen, yeylon
Target Milestone: ---Keywords: Triaged, ZStream
Target Release: 3.3.0   
Hardware: All   
OS: Linux   
Whiteboard: integration
Fixed In Version: rhevm-log-collector-3.3.1-1.el6ev Doc Type: Bug Fix
Doc Text:
When rhevm-log-collector attempted to collect logs from Red Hat Enterprise Linux hosts, the process was suspended indefinitely while processing the SELinux sos plugin. This update adds a "-t" flag to the ssh command used in the log collector, which provides a controlling TTY to finish the rhevm-log-collector process after the host sosreport is collected.
Story Points: ---
Clone Of:
: 1022505 (view as bug list) Environment:
Last Closed: 2014-01-21 17:00:12 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1005202    
Bug Blocks: 1022505    

Description Derrick Ornelas 2013-09-20 20:38:03 UTC
Description of problem:  When rhevm-log-collector attempts to collect logs from RHEL hypervisor the process hangs indefinitely while processing the selinux sos plugin because of the following line:

        self.collectExtOutput("ausearch -m avc,user_avc -ts today")



Version-Release number of selected component (if applicable):

rhevm-log-collector-3.2.2-4.el6ev.noarch
sos-2.2-38.el6_4.2.noarch

How reproducible:

100%


Steps to Reproduce:
1.  Run 'rhevm-log-collector' on an environment containing a hypervisor running full RHEL 6



Actual results:

The rhevm-log-collector command never finishes, and sosreport runs indefinitely on the RHEL 6 hypervisor


Expected results:

The rhevm-log-collector command finishes after the host sosreport is collected 


Additional info:

The issue appears to be that the ausearch command requires a controlling TTY(pty), and hangs indefinitely without access to one.  The ssh command that rhevm-log-collector runs does have a controlling TTY.

Comment 1 Sandro Bonazzola 2013-09-23 06:26:46 UTC
There is an open bug about ausearch, however it seems that running it through ssh with -t flag is enough for providing the needed TTY.
I just need to check if adding that flag has other implications.

Comment 2 Sandro Bonazzola 2013-09-24 14:45:58 UTC
Patch pushed upstream master by James W. Mills.

Comment 3 Sandro Bonazzola 2013-09-25 13:12:27 UTC
Patch merged upstream master. Pushed and merged also on upstream 3.3 branch.

Comment 5 sefi litmanovich 2013-10-03 07:52:50 UTC
verified on RHEVM 3.3 IS17.
rhevm-log-collector-3.3.0-1.el6ev.noarch
sos-2.2-44.el6.noarch

Comment 7 errata-xmlrpc 2014-01-21 17:00:12 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2014-0039.html