[Ovirt-devel] yum update broke ovirt

Hugh O. Brock hbrock at redhat.com
Tue Aug 4 21:48:11 UTC 2009


On Tue, Aug 04, 2009 at 01:42:50PM +1000, Justin Clacherty wrote:
> Justin Clacherty wrote:
> >It appears to be an selinux problem.  From /var/log/audit/audit.log
> >
> >type=AVC msg=audit(1249356621.775:115): avc:  denied  { create } for  
> >pid=4611 comm="qemu-kvm" name="Services.monitor" 
> >scontext=system_u:system_r:svirt_t:s0:c405,c995 
> >tcontext=system_u:object_r:svirt_var_run_t:s0:c405,c995 tclass=sock_file
> 
> Running "setenforce Permissive" on the node allows me to start the VM so 
> it seems selinux is the problem here.  I don't think it's causing the 
> iscsi problems though.
> 

Apologies for the selinux bit, a fix is in rawhide selinux policy and
will be in f11 updates as soon as mirrors catch up. iSCSI has been
working OK for us but there were some recent changes there around iscsi
pool refresh, maybe there are bugs there... and unfortunately the guy
who owns that code is on vacation until next week.

We'll keep you informed...

--Hugh




More information about the ovirt-devel mailing list