https://bugzilla.suse.com/show_bug.cgi?id=1232648 Bug ID: 1232648 Summary: [tw][selinux][wireguard] serial-getty@hvc0.service: Deactivated after wireguard tests and caused openQA test fail Classification: openSUSE Product: openSUSE Tumbleweed Version: Slowroll Hardware: x86-64 URL: https://openqa.opensuse.org/tests/4606619/modules/wire guard/steps/133 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: richard.fan@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Description The issue is a bit strange, it can only be seen with tw with selinux enabled by default. the serial terminal login session gets dis-connect after wireguard tests. but I can't find a manual reproducing step so far. I can see below messages even from test code, no logout operation is there:

Oct 30 22:48:27 client login[958]: pam_systemd(login:session): New sd-bus connection (system-bus-pam-systemd-958) opened. Oct 30 22:48:27 client login[958]: pam_unix(login:session): session closed for user root Oct 30 22:48:27 client systemd-logind[817]: Session 1 logged out. Waiting for processes to exit. Oct 30 22:48:27 client systemd[1]: serial-getty@hvc0.service: Deactivated successfully. Oct 30 22:48:27 client systemd[1]: run-credentials-serial\x2dgetty\x40hvc0.service.mount: Deactivated successfully.

And I can see the serial terminal is logged out:

Welcome to openSUSE Tumbleweed 20241027 - Kernel 6.11.5-1-default (hvc0).

ens4: 10.0.2.102 fe80::5054:ff:fe12:40f wg1: 192.168.2.2

client login:

[openQA jobs are failed here since the expected return codes are missing] The issue is not seen with apparmor enabled by default. https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=wireguard_client&version=Tumbleweed Workaround: switch to root-console after the tests to complete the job My questions: 1. Does selinux force reset the hvc0? 2. Why the issues are seen after some network changes to system? Please see attached logs for more detail information aslo https://progress.opensuse.org/issues/168589 records ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-wireguard@64bit fails in [wireguard](https://openqa.opensuse.org/tests/4606619/modules/wireguard/steps/133) ## Test suite description Multimachine Wireguard client test. Maintainers: pdostal@suse.cz, pvorel@suse.cz ## Reproducible Fails since (at least) Build [rfan1028](https://openqa.opensuse.org/tests/4600433) ## Expected result Last good: (unknown) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=wireguard&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.