[Gluster-infra] Unable to access logs in slave1

[Michael Scherer]

Le vendredi 10 juin 2016 à 13:12 +0530, Nigel Babu a écrit :
> I've fixed this particular instance with the following:
> 
> `chcon -Rt httpd_sys_content_t
> /archives/logs/glusterfs-logs-20160610:06:51:55.tgz`
> 
> Michael, is this the Right Way™ to fix these errors?

Would work. 

The files are supposed to be system_u:object_r:public_content_t:s0

# matchpathcon /archives/logs/glusterfs-logs-20160609:12:35:10.tgz
/archives/logs/glusterfs-logs-20160609:12:35:10.tgz
system_u:object_r:public_content_t:s0

but after last fix, i didn't relabel them, so we have:
 ls -lZ /archives/logs/glusterfs-logs-20160609:12:35:10.tgz
-rw-r--r--. root root
unconfined_u:object_r:default_t:s0 /archives/logs/glusterfs-logs-20160609:12:35:10.tgz


restorecon -R /archives/ on all builder should be the solution, I will
run it.

> On Fri, Jun 10, 2016 at 12:39 PM, Anuradha Talur <atalur at redhat.com> wrote:
> 
> > Hi,
> >
> > I'm still seeing this issue. Can someone please look into it?
> >
> > Regression was run on slave21 :
> > https://build.gluster.org/job/rackspace-regression-2GB-triggered/21626/consoleFull
> > Link to logs :
> > http://slave21.cloud.gluster.org/logs/glusterfs-logs-20160610:06:51:55.tgz
> >
> > ----- Original Message -----
> > > From: "Michael Scherer" <mscherer at redhat.com>
> > > To: "Shyam" <srangana at redhat.com>
> > > Cc: "gluster-infra" <gluster-infra at gluster.org>
> > > Sent: Wednesday, June 8, 2016 8:10:07 PM
> > > Subject: Re: [Gluster-infra] Unable to access logs in slave1
> > >
> > > Le mardi 07 juin 2016 à 10:32 +0200, Michael Scherer a écrit :
> > > > Le lundi 06 juin 2016 à 14:53 -0400, Shyam a écrit :
> > > > > This [1] run failed, and I wanted access the logs as posted at [2].
> > > > >
> > > > > Clicking the link [2] gives an "403 Forbidden" error.
> > > > >
> > > > > I am logged into Jenkins (if that matters).
> > > > >
> > > > > Looks like the /exports/logs is not exported on slave1?
> > > > >
> > > > > Can someone look into it?
> > > >
> > > > SELinux issues:
> > > > type=AVC msg=audit(1465288239.554:1894410): avc:  denied  { read } for
> > > > pid=19568 comm="nginx" name="archives" dev=xvda1 ino=1507329
> > > > scontext=system_u:system_r:httpd_t:s0
> > > > tcontext=system_u:object_r:default_t:s0 tclass=dir
> > > >
> > > >
> > > > I will fix later.
> > >
> > > I forgot to send a email, but this should be fixed now.
> > >
> > > --
> > > Michael Scherer
> > > Sysadmin, Community Infrastructure and Platform, OSAS
> > >
> > >
> > >
> > > _______________________________________________
> > > Gluster-infra mailing list
> > > Gluster-infra at gluster.org
> > > http://www.gluster.org/mailman/listinfo/gluster-infra
> >
> > --
> > Thanks,
> > Anuradha.
> > _______________________________________________
> > Gluster-infra mailing list
> > Gluster-infra at gluster.org
> > http://www.gluster.org/mailman/listinfo/gluster-infra
> >
> 
> 
> 

-- 
Michael Scherer
Sysadmin, Community Infrastructure and Platform, OSAS


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part
URL: <http://www.gluster.org/pipermail/gluster-infra/attachments/20160610/8ce713c6/attachment-0001.sig>