Note: This is a public test instance of Red Hat Bugzilla. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback at bugzilla.redhat.com.
Bug 1534119 - lldpad startup fails due to SELinux map denial (breaks FCoE)
Summary: lldpad startup fails due to SELinux map denial (breaks FCoE)
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: rawhide
Hardware: Unspecified
OS: Unspecified
urgent
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: AcceptedBlocker
: 1534118 (view as bug list)
Depends On:
Blocks: F28FinalBlocker
TreeView+ depends on / blocked
 
Reported: 2018-01-13 10:23 UTC by lnie
Modified: 2018-02-01 13:53 UTC (History)
13 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2018-02-01 13:53:53 UTC
Type: Bug
Embargoed:

Attachments (Terms of Use)
journal (272.46 KB, text/plain)
2018-01-14 02:09 UTC, lnie 		no flags Details
journal (257.73 KB, text/plain)
2018-01-23 12:08 UTC, lnie 		no flags Details
View All

Description lnie 2018-01-13 10:23:42 UTC 
Description of problem:
I know lldpad is supposed to be disabled for Broadcom devices,
but intel devices really dose need lldpad,please fix this,thanks a lot.
Actually,fcoe-utils doesn't work well with Broadcom devices since f27,please see bug#1534118


Version-Release number of selected component (if applicable):
kernel-4.15.0-0.rc7.git2.1.fc28.x86_64
fcoe-utils-1.0.32-3.fc27.x86_64
lldpad-1.0.1-8.git036e314.fc27.x86_64

How reproducible:
always

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:
Comment 1 lnie 2018-01-14 02:09:22 UTC 
Created attachment 1380854 [details]
journal
Comment 2 Adam Williamson 2018-01-23 08:24:42 UTC 
This may be due to an selinux denial:

Jan 13 20:57:40 storageqe-13.rhts.eng.bos.redhat.com audit[8667]: AVC avc:  denied  { map } for  pid=8667 comm="lldpad" path="/dev/shm/lldpad.state" dev="tmpfs" ino=30443 scontext=system_u:system_r:lldpad_t:s0 tcontext=system_u:object_r:lldpad_tmpfs_t:s0 tclass=file permissive=0

lili, can you try it with enforcing=0 boot parameter and see if it works then? Thanks!
Comment 3 lnie 2018-01-23 12:08:08 UTC 
Created attachment 1384817 [details]
journal
Comment 4 lnie 2018-01-23 12:11:36 UTC 
Adam,systemctl start lldpad successfully,after setenforce 0:)
Comment 5 lnie 2018-01-23 12:29:23 UTC 
*** Bug 1534118 has been marked as a duplicate of this bug. ***
Comment 6 Adam Williamson 2018-01-23 13:13:12 UTC 
Proposing as a Final blocker: criterion "The installer must be able to detect (if possible) and install to supported network-attached storage devices." (I think that's right, right lili? This breaks FCoE install / boot?)
Comment 7 lnie 2018-01-24 03:02:10 UTC 
Adam,right,fcoe dosen't works on ixgbe drivers without lldpad running
Comment 8 Kamil Páral 2018-01-29 12:39:05 UTC 
+1 blocker per comment 6
Comment 9 František Zatloukal 2018-01-29 12:39:43 UTC 
+1 blocker
Comment 10 Lukas Brabec 2018-01-29 12:39:59 UTC 
+1 blocker
Comment 11 Kamil Páral 2018-01-29 12:41:21 UTC 
Marking as accepted blocker.
Note You need to log in before you can comment on or make changes to this bug.