Bug ID | 1231479 |
---|---|
Summary | [Build 20241008-SELinux] can not start nginx |
Classification | openSUSE |
Product | openSUSE Tumbleweed |
Version | Current |
Hardware | Other |
URL | https://openqa.opensuse.org/tests/4548522/modules/nginx/steps/62 |
OS | Other |
Status | NEW |
Severity | Normal |
Priority | P5 - None |
Component | Security |
Assignee | security-team@suse.de |
Reporter | cathy.hu@suse.com |
QA Contact | qa-bugs@suse.de |
Blocks | 1230118 |
Target Milestone | --- |
Found By | openQA |
Blocker | Yes |
Tumbleweed iso test with SELinux enabled by default, see tracker bsc#1230118 also failing in: https://openqa.opensuse.org/tests/4548591#step/nginx/62 https://openqa.opensuse.org/tests/4548511#step/nginx/65 https://openqa.opensuse.org/tests/4548522#step/nginx/62 https://openqa.opensuse.org/tests/4548519#step/nginx/62 https://openqa.opensuse.org/tests/4548598#step/nginx/62 https://openqa.opensuse.org/tests/4548600#step/nginx/62 https://openqa.opensuse.org/tests/4548512#step/nginx/62 https://openqa.opensuse.org/tests/4548594#step/nginx/62 https://openqa.opensuse.org/tests/4548514#step/nginx/62 https://openqa.opensuse.org/tests/4548513#step/nginx/62 https://openqa.opensuse.org/tests/4548548#step/nginx/62 https://openqa.opensuse.org/tests/4548529#step/nginx/62 https://openqa.opensuse.org/tests/4548520#step/nginx/62 https://openqa.opensuse.org/tests/4548501#step/nginx/62 probably policy issue, see AVCs: type=AVC msg=audit(1728548171.848:2379): avc: denied { name_bind } for pid=85811 comm="nginx" src=444 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:reserved_port_t:s0 tclass=tcp_socket permissive=0 ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-xfce@64bit fails in [nginx](https://openqa.opensuse.org/tests/4548522/modules/nginx/steps/62) ## Test suite description ## Reproducible Fails since (at least) Build [20241008-SELinux](https://openqa.opensuse.org/tests/4548522) (current job) ## Expected result Last good: [20241009](https://openqa.opensuse.org/tests/4547157) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=xfce&version=Tumbleweed)