Actions
Issue #1484
closed
celery services do not start on Fedora Server or Fedora Workstation with SELinux enabled
Start date:
Due date:
Estimated time:
Severity:
3. High
Version:
Master
Platform Release:
2.7.2
OS:
Triaged:
Yes
Groomed:
No
Sprint Candidate:
No
Tags:
Pulp 2
Sprint:
Quarter:
Description
If you install pulp nightly (pulp-server-2.8.0-0.1.alpha.git.0.8976233.fc23.noarch) and attempt to start pulp_celerybeat, you will get:
systemd-coredump[1697]: Process 1689 (celery) of user 48 dumped core.
Stack trace of thread 1689:
#0 0x00007f39f0f4ba98 raise (libc.so.6)
#1 0x00007f39f0f4d69a abort (libc.so.6)
#2 0x00007f39f2126985 log_assert_failed (/usr/lib64/libnss_myhostname.so.2)
#3 0x00007f39f2126ea5 safe_close (/usr/lib64/libnss_myhostname.so.2)
#4 0x00007f39f2123f32 sd_netlink_open (/usr/lib64/libnss_myhostname.so.2)
#5 0x00007f39f21250a4 local_addresses.constprop.4 (/usr/lib64/libnss_myhostna
#6 0x00007f39f21239ae _nss_myhostname_gethostbyname4_r (/usr/lib64/libnss_myh
#7 0x00007f39f0ffecbf gaih_inet (libc.so.6)
#8 0x00007f39f10020a6 getaddrinfo (libc.so.6)
#9 0x00007f39ec774c65 setipaddr (_socketmodule.so)
#10 0x00007f39ec7774e7 socket_gethostbyaddr (_socketmodule.so)
#11 0x00007f39f1cf98be PyEval_EvalFrameEx (libpython2.7.so.1.0)
#12 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#13 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#14 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#15 0x00007f39f1cfa7d9 PyEval_EvalCode (libpython2.7.so.1.0)
#16 0x00007f39f1d0a4dc PyImport_ExecCodeModuleEx (libpython2.7.so.1.0)
#17 0x00007f39f1d0a762 load_source_module (libpython2.7.so.1.0)
#18 0x00007f39f1d0b3f0 import_submodule (libpython2.7.so.1.0)
#19 0x00007f39f1d0b918 ensure_fromlist (libpython2.7.so.1.0)
#20 0x00007f39f1d0c15a PyImport_ImportModuleLevel (libpython2.7.so.1.0)
#21 0x00007f39f1cf1e48 builtin___import__ (libpython2.7.so.1.0)
#22 0x00007f39f1c61b03 PyObject_Call (libpython2.7.so.1.0)
#23 0x00007f39f1cf3ac7 PyEval_CallObjectWithKeywords (libpython2.7.so.1.0)
#24 0x00007f39f1cf661b PyEval_EvalFrameEx (libpython2.7.so.1.0)
#25 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#26 0x00007f39f1cfa7d9 PyEval_EvalCode (libpython2.7.so.1.0)
#27 0x00007f39f1d0a4dc PyImport_ExecCodeModuleEx (libpython2.7.so.1.0)
#28 0x00007f39f1d0a762 load_source_module (libpython2.7.so.1.0)
#29 0x00007f39f1d0b3f0 import_submodule (libpython2.7.so.1.0)
#30 0x00007f39f1d0b67f load_next (libpython2.7.so.1.0)
#31 0x00007f39f1d0c098 PyImport_ImportModuleLevel (libpython2.7.so.1.0)
#32 0x00007f39f1cf1e48 builtin___import__ (libpython2.7.so.1.0)
#33 0x00007f39f1cf98be PyEval_EvalFrameEx (libpython2.7.so.1.0)
#34 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#35 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#36 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#37 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#38 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#39 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#40 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#41 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#42 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#43 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#44 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#45 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#46 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#47 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#48 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#49 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#50 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#51 0x00007f39f1cf95c6 PyEval_EvalFrameEx (libpython2.7.so.1.0)
#52 0x00007f39f1cfa6b4 PyEval_EvalCodeEx (libpython2.7.so.1.0)
#53 0x00007f39f1cfa7d9 PyEval_EvalCode (libpython2.7.so.1.0)
#54 0x00007f39f1d13bdf run_mod (libpython2.7.so.1.0)
#55 0x00007f39f1d14db2 PyRun_FileExFlags (libpython2.7.so.1.0)
#56 0x00007f39f1d15fc7 PyRun_SimpleFileExFlags (libpython2.7.so.1.0)
#57 0x00007f39f1d281e1 Py_Main (libpython2.7.so.1.0)
#58 0x00007f39f0f37580 __libc_start_main (libc.so.6)
#59 0x0000559ca9765839 _start (python2.7)
This appears to be an selinux issue:
- audit2allow -a
#============= celery_t ==============
allow celery_t self:netlink_route_socket setopt;
disabling selinux allows celerybeat to start normally.
Related issues
Actions
.
Switches SELinux netlink_route_socket to use a Refpol macro
The old statement whitelisted explicit permissions and was not fully complete. It worked on most distributions but not all. This Refpol version will use a superset which is maintained in Refpol and is appropriate for use anywhere Refpol is available.
closes #1484 https://pulp.plan.io/issues/1484