Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.

Bug 1365187

Summary: AVC denied unlink/write for passenger and 500 Internal Server Errors
Product: Red Hat Quickstart Cloud Installer Reporter: Thom Carlin <tcarlin>
Component: Installation - SatelliteAssignee: Derek Whatley <dwhatley>
Status: ASSIGNED --- QA Contact: Dave Johnson <dajohnso>
Severity: medium Docs Contact: Julie <juwu>
Priority: unspecified    
Version: 1.0CC: bthurber, dwhatley, tsanders
Target Milestone: ---Keywords: Triaged
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of:
: 1369478 (view as bug list) Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 1369478    
Bug Blocks:    

Description Thom Carlin 2016-08-08 14:53:48 UTC
Description of problem:

Receiving "500 Internal Server errors" on Satellite 6 for latest compose

Version-Release number of selected component (if applicable):

QCI-1.0-RHEL-7-20160806.t.0

How reproducible:

Believe 100%

Steps to Reproduce:
1. Install/configure QCI
   Register Sat 6 system to RHN
2. yum update
3. Reboot
4. restorecon -RFvv /
5. http://sat6_fqdn
6. grep -i denied /var/log/audit/audit.log

Actual results:

"Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log."

"type=AVC msg=audit(1470659632.836:124): avc:  denied  { unlink } for  pid=3101 comm="ruby" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659633.018:125): avc:  denied  { unlink } for  pid=2842 comm="PassengerHelper" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659634.866:126): avc:  denied  { unlink } for  pid=3852 comm="PassengerHelper" name="ruby.9lWcbdETUQepw3phiRKo2GKek" dev="tmpfs" ino=29352 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470661086.721:130): avc:  denied  { write } for  pid=3147 comm="httpd" name="request" dev="tmpfs" ino=25061 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file"

Expected results:

Working web UI
No errors

Additional info:

Workaround:
katello-service restart