[Bug 1216787] New: [Build 548.2] AppARmor many upgrade tests fail on AVC denials
https://bugzilla.suse.com/show_bug.cgi?id=1216787 Bug ID: 1216787 Summary: [Build 548.2] AppARmor many upgrade tests fail on AVC denials Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: Other URL: https://openqa.opensuse.org/tests/3691976/modules/prep are_system_for_update_tests/steps/15 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: AppArmor Assignee: suse-beta@cboltz.de Reporter: lubos.kocman@suse.com QA Contact: qa-bugs@suse.de Target Milestone: --- Found By: openQA Blocker: Yes ## Observation many of our upgrade tests failed on following AVC denials in AppArmor full log https://paste.opensuse.org/pastes/09c5eebd91df # wait_serial expected: "SCRIPT_FINISHEDOSm16-\\d+-" # Result: OSm16 type=AVC msg=audit(1698766514.856:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="php-fpm" pid=639 comm="apparmor_parser" type=AVC msg=audit(1698766514.884:12): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-bgqd" pid=641 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.884:12): arch=c000003e syscall=1 success=yes exit=42097 a0=8 a1=5651a69e3bf0 a2=a471 a3=0 items=0 ppid=617 pid=641 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.884:12): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 type=AVC msg=audit(1698766514.912:13): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-dcerpcd" pid=642 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.912:13): arch=c000003e syscall=1 success=yes exit=43027 a0=8 a1=5651a694e370 a2=a813 a3=0 items=0 ppid=617 pid=642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.912:13): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 type=AVC msg=audit(1698766514.940:14): apparmor="STATUS" operation="profile_load" profile="unconfined" name="samba-rpcd" pid=643 comm="apparmor_parser" type=SYSCALL msg=audit(1698766514.940:14): arch=c000003e syscall=1 success=yes exit=41505 a0=8 a1=5651a6989e80 a2=a221 a3=0 items=0 ppid=617 pid=643 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apparmor_parser" exe="/sbin/apparmor_parser" subj=unconfined key=(null) type=PROCTITLE msg=audit(1698766514.940:14): proctitle=2F7362696E2F61707061726D6F725F706172736572002D2D7265706C616365002D2D002F6574632F61707061726D6F722E64 openQA test in scenario opensuse-15.6-NET-x86_64-kde@64bit-2G fails in [prepare_system_for_update_tests](https://openqa.opensuse.org/tests/3691976/modules/prepare_system_for_update_...) ## Test suite description TIMEOUT_SCALE property is added to avoid sporadic shutdown fails in kde@USBboot_64 scenario. Added by : oorlov; Related ticket: poo#37000 ## Reproducible Fails since (at least) Build [545.1](https://openqa.opensuse.org/tests/3670617) ## Expected result Last good: [538.1](https://openqa.opensuse.org/tests/3640584) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=NET&machine=64bit-2G&test=kde&version=15.6) -- You are receiving this mail because: You are on the CC list for the bug.
https://bugzilla.suse.com/show_bug.cgi?id=1216787 https://bugzilla.suse.com/show_bug.cgi?id=1216787#c1 Christian Boltz <suse-beta@cboltz.de> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lubos.kocman@suse.com Flags| |needinfo?(lubos.kocman@suse | |.com) --- Comment #1 from Christian Boltz <suse-beta@cboltz.de> --- (In reply to Lubos Kocman from comment #0)
many of our upgrade tests failed on following AVC denials in AppArmor
The log (also the full log) only shows profile loads, but no denials. Are you sure that this is caused by AppArmor? If so, are there any DENIED log messages somewhere? Also, what was changed in 15.66 and/or openQA since the last successful run? -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com