Project

Profile

Help

Issue #1731

Updated by dkliban@redhat.com almost 7 years ago

During a sync on Fedora 23 I see the following traceback: 

 <pre> 
 celery.worker.strategy:INFO: Received task: pulp.server.async.tasks._release_resource[3c04a710-b935-45fc-b65a-f9ee897faf39] 
 pulp.server.async.tasks:INFO: Task failed : [31af7a44-04b1-4ae5-b6d4-8be2bed0ca10] 
 celery.worker.job:ERROR: (1768-51936) Task pulp.server.managers.repo.sync.sync[31af7a44-04b1-4ae5-b6d4-8be2bed0ca10] raised une 
 ermission denied\nsecmem usage: 0/0 bytes in 0/0 blocks of pool 0/0\n",) 
 celery.worker.job:ERROR: (1768-51936) Traceback (most recent call last): 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 240, in trace_task 
 celery.worker.job:ERROR: (1768-51936)       R = retval = fun(*args, **kwargs) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 473, in __call__ 
 celery.worker.job:ERROR: (1768-51936)       return super(Task, self).__call__(*args, **kwargs) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 103, in __call__ 
 celery.worker.job:ERROR: (1768-51936)       return super(PulpTask, self).__call__(*args, **kwargs) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/celery/app/trace.py", line 437, in __protected_call__ 
 celery.worker.job:ERROR: (1768-51936)       return self.run(*args, **kwargs) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/server/controllers/repository.py", line 757, in sync 
 celery.worker.job:ERROR: (1768-51936)       sync_report = sync_repo(transfer_repo, conduit, call_config) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/server/async/tasks.py", line 658, in wrap_f 
 celery.worker.job:ERROR: (1768-51936)       return f(*args, **kwargs) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/web.py", line 91, in sync_repo 
 celery.worker.job:ERROR: (1768-51936)       report = step.process_lifecycle() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 562, in process_lifecycle 
 celery.worker.job:ERROR: (1768-51936)       super(PluginStep, self).process_lifecycle() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 159, in process_lifecycle 
 celery.worker.job:ERROR: (1768-51936)       step.process() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 249, in process 
 celery.worker.job:ERROR: (1768-51936)       self._process_block() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp/plugins/util/publish_step.py", line 293, in _process_block 
 celery.worker.job:ERROR: (1768-51936)       self.process_main() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 93, in process_main 
 celery.worker.job:ERROR: (1768-51936)       remote.add() 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 414, in add 
 celery.worker.job:ERROR: (1768-51936)       path, key_ids = self.gpg_keys 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/pulp_ostree/plugins/importers/steps.py", line 385, in gpg_keys 
 celery.worker.job:ERROR: (1768-51936)       gpg = GPG(gnupghome=home) 
 celery.worker.job:ERROR: (1768-51936)     File "/usr/lib/python2.7/site-packages/gnupg.py", line 685, in __init__ 
 celery.worker.job:ERROR: (1768-51936)       result.stderr)) 
 celery.worker.job:ERROR: (1768-51936) ValueError: Error invoking gpg: 2: gpg: fatal: can't disable core dumps: Permission denied 
 celery.worker.job:ERROR: (1768-51936) secmem usage: 0/0 bytes in 0/0 blocks of pool 0/0 

 </pre> 

 At the same time I am seeing the following denials in the /var/log/audit/audit.log 

 <pre> 
 type=AVC msg=audit(1456838329.864:12493): avc:    denied    { setrlimit } for    pid=2955 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0 
 type=AVC msg=audit(1456838330.599:12494): avc:    denied    { setrlimit } for    pid=2958 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0 
 type=AVC msg=audit(1456838337.238:12495): avc:    denied    { setrlimit } for    pid=2973 comm="gpg" scontext=system_u:system_r:celery_t:s0 tcontext=system_u:system_r:celery_t:s0 tclass=process permissive=0 
 </pre>

Back