Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 1365187 - AVC denied unlink/write for passenger and 500 Internal Server Errors
Summary: AVC denied unlink/write for passenger and 500 Internal Server Errors
Keywords:
Status: ASSIGNED
Alias: None
Product: Red Hat Quickstart Cloud Installer
Classification: Red Hat
Component: Installation - Satellite
Version: 1.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
: ---
Assignee: Derek Whatley
QA Contact: Dave Johnson
Julie
URL:
Whiteboard:
Depends On: 1369478
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-08-08 14:53 UTC by Thom Carlin
Modified: 2018-09-12 23:46 UTC (History)
3 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1369478 (view as bug list)
Environment:
Last Closed:


Attachments (Terms of Use)

Description Thom Carlin 2016-08-08 14:53:48 UTC
Description of problem:

Receiving "500 Internal Server errors" on Satellite 6 for latest compose

Version-Release number of selected component (if applicable):

QCI-1.0-RHEL-7-20160806.t.0

How reproducible:

Believe 100%

Steps to Reproduce:
1. Install/configure QCI
   Register Sat 6 system to RHN
2. yum update
3. Reboot
4. restorecon -RFvv /
5. http://sat6_fqdn
6. grep -i denied /var/log/audit/audit.log

Actual results:

"Internal Server Error

The server encountered an internal error or misconfiguration and was unable to complete your request.

Please contact the server administrator at [no address given] to inform them of the time this error occurred, and the actions you performed just before this error.

More information about this error may be available in the server error log."

"type=AVC msg=audit(1470659632.836:124): avc:  denied  { unlink } for  pid=3101 comm="ruby" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659633.018:125): avc:  denied  { unlink } for  pid=2842 comm="PassengerHelper" name="preloader.3101" dev="tmpfs" ino=28464 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470659634.866:126): avc:  denied  { unlink } for  pid=3852 comm="PassengerHelper" name="ruby.9lWcbdETUQepw3phiRKo2GKek" dev="tmpfs" ino=29352 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file
type=AVC msg=audit(1470661086.721:130): avc:  denied  { write } for  pid=3147 comm="httpd" name="request" dev="tmpfs" ino=25061 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=sock_file"

Expected results:

Working web UI
No errors

Additional info:

Workaround:
katello-service restart


Note You need to log in before you can comment on or make changes to this bug.