Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.

Bug 1694679

Summary: SELinux blocks working in /tmp directory for wsrep_recover_position function
Product: Red Hat Software Collections Reporter: Michal Schorm <mschorm>
Component: mariadbAssignee: Michal Schorm <mschorm>
Status: POST --- QA Contact: qe-baseos-daemons
Severity: unspecified Docs Contact:
Priority: high    
Version: rh-mariadb102CC: databases-maint, mmuzila
Target Milestone: alpha   
Target Release: 3.3   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Comment 2 Michal Schorm 2019-04-02 15:19:38 UTC
The issue emerged by following fix in 10.2.10:
https://jira.mariadb.org/browse/MDEV-13950

Comment 3 Michal Schorm 2019-04-03 00:10:03 UTC
The behaviour is correct and expected.
We need to fix the script that want to do stuff in /tmp, instead of the SELinux rules.

We already fixed this in RHSCL MariaDB 10.1 collection, so this is a regression.

The issue is reproducible only on RHEL6, since we don't execuse mysqld_safe with systemd service, as we do it in sysVinit.
No later software collections are hit, since MariaDB 10.3 collection isn't shipped on RHEL6.

---

For more info look at the fix in 10.1 collection:
https://src.osci.redhat.com/rpms/mariadb/c/421e3cccd6b93d31edc187fb80008cdcd3bd973f?branch=rhscl-3.3-rh-mariadb101-rhel-6

---

Upstream changed location of the temporary file in the wsrep_recover_position function, which causes issues on RHEL-6, because mysqld_safe is not expected to play with files in /tmp, and SELinux started to complain.

Changing the location of the temporary files to the datadir means practically reverting part of the upstream commit
https://github.com/MariaDB/server/commit/bb7a70c9551c1756b1d1736ca4f6a0a965795873

Upstream issue: https://jira.mariadb.org/browse/MDEV-10767

Comment 4 Michal Schorm 2019-04-08 12:22:39 UTC
QA note:
  Can be tested by service starting on RHEL 6.