[Bugs] [Bug 1311911] volume not getting exported after setting the option ganesha.enable

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1311911



--- Comment #3 from Apeksha <akhakhar at redhat.com> ---
**Steps when selinux was in enforcing mode


    [root at dhcp46-59 ~]# getenforce
    Enforcing
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# gluster v create rs 10.70.46.59:/root/brick2 force
    volume create: rs: success: please start the volume to access data
    [root at dhcp46-59 ~]# gluster v start rs
    volume start: rs: success
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# #gluster v set rs ganesha.enable on
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# grep -i "avc" /var/log/audit/audit.log
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# gluster v set rs ganesha.enable on
    volume set: success
    [root at dhcp46-59 ~]# grep -i "avc" /var/log/audit/audit.log
    type=USER_AVC msg=audit(1456767046.846:5613): pid=902 uid=81
auid=4294967295 ses=4294967295
subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  {
send_msg } for msgtype=signal interface=org.ganesha.nfsd.exportmgr
member=AddExport dest=org.ganesha.nfsd spid=1613 tpid=26644
scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:system_r:initrc_t:s0
tclass=dbus  exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
    [root at dhcp46-59 ~]# cat /var/log/audit/audit.log | audit2allow


    #============= glusterd_t ==============
    allow glusterd_t initrc_t:dbus send_msg;
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# showmount -e localhost
    Export list for localhost:
    /sample (everyone)
    [root at dhcp46-59 ~]#



**Steps when selinux is in permissive mode


    [root at dhcp46-59 ~]# setenforce 0
    [root at dhcp46-59 ~]# gluster v create rs1 10.70.46.59:/root/brick3 force
    volume create: rs1: success: please start the volume to access data
    [root at dhcp46-59 ~]# gluster v start rs1
    volume start: rs1: success
    [root at dhcp46-59 ~]# gluster v set rs1 ganesha.enable on
    volume set: success
    [root at dhcp46-59 ~]# showmount -e localhost
    Export list for localhost:
    /sample (everyone)
    /rs1    (everyone)
    [root at dhcp46-59 ~]# grep -i "avc" /var/log/audit/audit.log
    type=USER_AVC msg=audit(1456767046.846:5613): pid=902 uid=81
auid=4294967295 ses=4294967295
subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  {
send_msg } for msgtype=signal interface=org.ganesha.nfsd.exportmgr
member=AddExport dest=org.ganesha.nfsd spid=1613 tpid=26644
scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:system_r:initrc_t:s0
tclass=dbus  exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
    type=USER_AVC msg=audit(1456767084.524:5622): pid=1 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received setenforce
notice (enforcing=0)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=?
terminal=?'
    type=USER_AVC msg=audit(1456767110.891:5623): pid=902 uid=81
auid=4294967295 ses=4294967295
subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  {
send_msg } for msgtype=signal interface=org.ganesha.nfsd.exportmgr
member=AddExport dest=org.ganesha.nfsd spid=2540 tpid=26644
scontext=system_u:system_r:glusterd_t:s0 tcontext=system_u:system_r:initrc_t:s0
tclass=dbus  exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?'
    [root at dhcp46-59 ~]# cat /var/log/audit/audit.log | audit2allow


    #============= glusterd_t ==============
    allow glusterd_t initrc_t:dbus send_msg;
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]#
    [root at dhcp46-59 ~]# rpm -qa | grep selinux-policy
    selinux-policy-3.13.1-60.el7_2.3.noarch
    selinux-policy-targeted-3.13.1-60.el7_2.3.noarch
    [root at dhcp46-59 ~]#

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=u31DClgSgS&a=cc_unsubscribe