[Container-tools] [adb-utils] "systemctl start openshift" on Fedora 24 cause a lot of avc denied with start failure

Praveen Kumar kumarpraveen.nitdgp at gmail.com
Wed Aug 24 10:04:42 UTC 2016


On Tue, Aug 23, 2016 at 1:50 PM, Alessandro Arrichiello
<aarrichi at redhat.com> wrote:
> Hi there,

Hi Alessandro,

>
> I've recently filled an issue in adb-utils github project page.
>
> Basically upgrading from Fedora 23 to 24 adb-utils systemd script stopped
> working properly.
> It seems that SELinux complains about the execution of adb-utils scripts
> calling directly the bash interpreter.
>
> I fixed the error by removing the interpreter execution, leaving only the
> script itself in /usr/lib/systemd/system/openshift.service for each
> occurrences.
>
> The full issue is described here:
> https://github.com/projectatomic/adb-utils/issues/181

We are already having discussion on that issue and according to
Daniel J Walsh these rules were always allowed. Let we have discussion
on the issue and conclude it there. Thanks for trying it out as
stand-alone entity.

>
> I don't know if the Fedora support is in scope for this project, anyway I
> think this issue may break the scripts in next RHEL releases, so if you
> agree I can create a pull request and submit the fix.
>
> Any comments will be appreciated,
>
> Thanks,
> Regards.
>
> --
> Alessandro Arrichiello
> Infrastructure Consultant
> --------------------------
> Red Hat Srl
> Via Gustavo Fara 26
> 20124 MILANO
> http://www.redhat.com
> mobile: +39 3441153848
> email: aarrichi at redhat.com
>
>
> _______________________________________________
> Container-tools mailing list
> Container-tools at redhat.com
> https://www.redhat.com/mailman/listinfo/container-tools
>



-- 
Praveen Kumar
http://fedoraproject.org/wiki/User:Kumarpraveen
http://fedoraproject.org/
http://kumar-pravin.blogspot.com




More information about the Container-tools mailing list