https://bugzilla.suse.com/show_bug.cgi?id=1231479 Bug ID: 1231479 Summary: [Build 20241008-SELinux] can not start nginx Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4548522/modules/ngin x/steps/62 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: cathy.hu@suse.com QA Contact: qa-bugs@suse.de Blocks: 1230118 Target Milestone: --- Found By: openQA Blocker: Yes Tumbleweed iso test with SELinux enabled by default, see tracker bsc#1230118 also failing in: https://openqa.opensuse.org/tests/4548591#step/nginx/62 https://openqa.opensuse.org/tests/4548511#step/nginx/65 https://openqa.opensuse.org/tests/4548522#step/nginx/62 https://openqa.opensuse.org/tests/4548519#step/nginx/62 https://openqa.opensuse.org/tests/4548598#step/nginx/62 https://openqa.opensuse.org/tests/4548600#step/nginx/62 https://openqa.opensuse.org/tests/4548512#step/nginx/62 https://openqa.opensuse.org/tests/4548594#step/nginx/62 https://openqa.opensuse.org/tests/4548514#step/nginx/62 https://openqa.opensuse.org/tests/4548513#step/nginx/62 https://openqa.opensuse.org/tests/4548548#step/nginx/62 https://openqa.opensuse.org/tests/4548529#step/nginx/62 https://openqa.opensuse.org/tests/4548520#step/nginx/62 https://openqa.opensuse.org/tests/4548501#step/nginx/62 probably policy issue, see AVCs: type=AVC msg=audit(1728548171.848:2379): avc: denied { name_bind } for pid=85811 comm="nginx" src=444 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:reserved_port_t:s0 tclass=tcp_socket permissive=0 ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-xfce@64bit fails in [nginx](https://openqa.opensuse.org/tests/4548522/modules/nginx/steps/62) ## Test suite description ## Reproducible Fails since (at least) Build [20241008-SELinux](https://openqa.opensuse.org/tests/4548522) (current job) ## Expected result Last good: [20241009](https://openqa.opensuse.org/tests/4547157) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=DVD&machine=64bit&test=xfce&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.