Bug ID 1231479
Summary [Build 20241008-SELinux] can not start nginx
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
URL https://openqa.opensuse.org/tests/4548522/modules/nginx/steps/62
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter cathy.hu@suse.com
QA Contact qa-bugs@suse.de
Blocks 1230118
Target Milestone ---
Found By openQA
Blocker Yes

Tumbleweed iso test with SELinux enabled by default, see tracker bsc#1230118

also failing in:
https://openqa.opensuse.org/tests/4548591#step/nginx/62
https://openqa.opensuse.org/tests/4548511#step/nginx/65
https://openqa.opensuse.org/tests/4548522#step/nginx/62
https://openqa.opensuse.org/tests/4548519#step/nginx/62
https://openqa.opensuse.org/tests/4548598#step/nginx/62
https://openqa.opensuse.org/tests/4548600#step/nginx/62
https://openqa.opensuse.org/tests/4548512#step/nginx/62
https://openqa.opensuse.org/tests/4548594#step/nginx/62
https://openqa.opensuse.org/tests/4548514#step/nginx/62
https://openqa.opensuse.org/tests/4548513#step/nginx/62
https://openqa.opensuse.org/tests/4548548#step/nginx/62
https://openqa.opensuse.org/tests/4548529#step/nginx/62
https://openqa.opensuse.org/tests/4548520#step/nginx/62
https://openqa.opensuse.org/tests/4548501#step/nginx/62

probably policy issue, see AVCs:

type=AVC msg=audit(1728548171.848:2379): avc:  denied  { name_bind } for 
pid=85811 comm="nginx" src=444 scontext=system_u:system_r:httpd_t:s0
tcontext=system_u:object_r:reserved_port_t:s0 tclass=tcp_socket permissive=0


## Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-xfce@64bit fails in
[nginx](https://openqa.opensuse.org/tests/4548522/modules/nginx/steps/62)

## Test suite description



## Reproducible

Fails since (at least) Build
[20241008-SELinux](https://openqa.opensuse.org/tests/4548522) (current job)


## Expected result

Last good: [20241009](https://openqa.opensuse.org/tests/4547157) (or more
recent)


## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=xfce&version=Tumbleweed)


You are receiving this mail because: