Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SELinux is preventing NetworkManager from write #539

Closed
marusak opened this issue Feb 17, 2020 · 1 comment · Fixed by #923
Closed

SELinux is preventing NetworkManager from write #539

marusak opened this issue Feb 17, 2020 · 1 comment · Fixed by #923
Labels
knownissue

Comments

@marusak
Copy link
Member

marusak commented Feb 17, 2020

New AVC on centos-8-stream like:

audit: type=1400 audit(1581925780.527:4): avc:  denied  { write } for  pid=8686 comm="NetworkManager" path="/var/tmp/dracut.HrkoJL/systemd-cat" dev="dm-0" ino=8721101 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

Downstream issue: https://bugs.centos.org/view.php?id=17060
@cockpituous
Copy link
Contributor

cockpituous commented Feb 17, 2020 •
edited

verify/centos-8-stream
Ooops, it happened again

# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9800/devtools/browser/759628dd-7fba-4df9-bacf-6bab3e5c8387
[0217/130356.318024:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0217/130356.319938:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0217/130356.323260:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9391\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1581944638387.5261,"url":"http://127.0.0.2:9391/cockpit/$b12bcc63f9470b16d17ee675cfe1c9b9b70e310ff3c0fdf6bae1f21208c0335a/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1581944652591.9558,"url":"http://127.0.0.2:9391/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"16750.42"}
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1581944788.830:4): avc:  denied  { write } for  pid=8694 comm="NetworkManager" path="/var/tmp/dracut.D9RefO/systemd-cat" dev="dm-0" ino=8721165 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1581944788.830:4): avc:  denied  { write } for  pid=8694 comm="NetworkManager" path="/var/tmp/dracut.D9RefO/systemd-cat" dev="dm-0" ino=8721165 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [389s on 1-ci-srv-03]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-17T13:09:38.075149 | revision 1416cfd
Times recorded: 1
Latest occurrences:

  • 2020-02-17T13:09:38.075149 | revision 1416cfd
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9824/devtools/browser/9ca5c72c-6af8-486d-b190-70265f129d03
[0218/100717.453513:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/100717.455728:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/100717.460590:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9491\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582020439441.628,"url":"http://127.0.0.2:9491/cockpit/$52fbd48021eeda9b6481cb7d12be65ad3d49b69860a79187fb94be34c35c2c89/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582020477180.671,"url":"http://127.0.0.2:9491/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"10716.42"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> log: health check failed
> warning: transport closed: timeout
audit: type=1400 audit(1582020657.067:4): avc:  denied  { write } for  pid=8686 comm="NetworkManager" path="/var/tmp/dracut.YBjpsQ/systemd-cat" dev="dm-0" ino=9597760 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2601-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582020657.067:4): avc:  denied  { write } for  pid=8686 comm="NetworkManager" path="/var/tmp/dracut.YBjpsQ/systemd-cat" dev="dm-0" ino=9597760 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [541s on 1-cockpit-7]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T10:14:21.666635 | revision 7450260691f5bd060f1c4277512948627d9d8e2b
Times recorded: 1
Latest occurrences:

  • 2020-02-18T10:14:21.666635 | revision 7450260691f5bd060f1c4277512948627d9d8e2b
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9425/devtools/browser/4b93a4e7-1bd2-4374-9f04-2d81c2e5f316
[0218/102802.033803:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/102802.039875:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/102802.043635:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9891\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582021685023.103,"url":"http://127.0.0.2:9891/cockpit/$e8c2b091218dbb7f0f9332137588c9b9968ab51cf0accea827e1c337f312eef7/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582021709353.7222,"url":"http://127.0.0.2:9891/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"20132.42"}
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> log: health check failed
> warning: transport closed: timeout
audit: type=1400 audit(1582021892.073:4): avc:  denied  { write } for  pid=8697 comm="NetworkManager" path="/var/tmp/dracut.lNMmn5/systemd-cat" dev="dm-0" ino=9093030 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-3001-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582021892.073:4): avc:  denied  { write } for  pid=8697 comm="NetworkManager" path="/var/tmp/dracut.lNMmn5/systemd-cat" dev="dm-0" ino=9093030 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [493s on 2-ci-srv-03]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T10:35:25.042218 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
Times recorded: 1
Latest occurrences:

  • 2020-02-18T10:35:25.042218 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9582/devtools/browser/90b37545-00c7-4fea-9873-6402af6c0144
[0218/103240.460300:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/103240.470850:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/103240.477031:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9191\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582021963599.7678,"url":"http://127.0.0.2:9191/cockpit/$585fa43021aa7193b97a30c880166984bccc8501a663bf0701ad82cf2e635cf6/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582021986498.772,"url":"http://127.0.0.2:9191/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"16707.42"}
Connection to 127.0.0.2 closed by remote host.
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: Connection closed by remote host
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: Connection closed by remote host
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582022152.233:4): avc:  denied  { write } for  pid=8688 comm="NetworkManager" path="/var/tmp/dracut.zQwb7f/systemd-cat" dev="dm-0" ino=8720706 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582022152.233:4): avc:  denied  { write } for  pid=8688 comm="NetworkManager" path="/var/tmp/dracut.zQwb7f/systemd-cat" dev="dm-0" ino=8720706 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [476s on 4-ci-srv-06]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T10:39:22.921936 | revision df8372428069ef6e85b32fd832be88b1dc7eb5ac
Times recorded: 1
Latest occurrences:

  • 2020-02-18T10:39:22.921936 | revision df8372428069ef6e85b32fd832be88b1dc7eb5ac
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9556/devtools/browser/0c7aee44-9885-4137-a06f-78c21826c172
[0218/110201.355931:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 33563: Permission denied (13)
[0218/110201.369091:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/110201.370416:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/110201.373336:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0218/110201.568018:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 33603: Permission denied (13)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9191\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582023723479.3389,"url":"http://127.0.0.2:9191/cockpit/$52fbd48021eeda9b6481cb7d12be65ad3d49b69860a79187fb94be34c35c2c89/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582023739913.244,"url":"http://127.0.0.2:9191/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"33603.42"}
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582023880.465:4): avc:  denied  { write } for  pid=8609 comm="NetworkManager" path="/var/tmp/dracut.963BYB/systemd-cat" dev="dm-0" ino=9517192 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2301-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582023880.465:4): avc:  denied  { write } for  pid=8609 comm="NetworkManager" path="/var/tmp/dracut.963BYB/systemd-cat" dev="dm-0" ino=9517192 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [396s on centosci-tasks-kvsm6]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T11:07:49.141822 | revision 7450260691f5bd060f1c4277512948627d9d8e2b
Times recorded: 1
Latest occurrences:

  • 2020-02-18T11:07:49.141822 | revision 7450260691f5bd060f1c4277512948627d9d8e2b
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9406/devtools/browser/4d5d2d5e-e9a9-4b6c-a4d3-5191c2b0010e
[0218/111032.055674:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 16314: Permission denied (13)
[0218/111032.069763:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/111032.071049:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/111032.073494:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0218/111032.317664:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 16356: Permission denied (13)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9591\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582024234190.52,"url":"http://127.0.0.2:9591/cockpit/$585fa43021aa7193b97a30c880166984bccc8501a663bf0701ad82cf2e635cf6/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582024248097.7969,"url":"http://127.0.0.2:9591/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"16356.42"}
Connection to 127.0.0.2 closed by remote host.
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582024386.862:4): avc:  denied  { write } for  pid=8621 comm="NetworkManager" path="/var/tmp/dracut.vTzL3k/systemd-cat" dev="dm-0" ino=8721100 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2701-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582024386.862:4): avc:  denied  { write } for  pid=8621 comm="NetworkManager" path="/var/tmp/dracut.vTzL3k/systemd-cat" dev="dm-0" ino=8721100 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [393s on centosci-tasks-lx0kz]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T11:16:17.378733 | revision df8372428069ef6e85b32fd832be88b1dc7eb5ac
Times recorded: 1
Latest occurrences:

  • 2020-02-18T11:16:17.378733 | revision df8372428069ef6e85b32fd832be88b1dc7eb5ac
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9422/devtools/browser/bab5bd38-b13a-4c43-b96f-e07384202f3b
[0218/114928.217290:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/114928.219260:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/114928.223439:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9391\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582026570609.631,"url":"http://127.0.0.2:9391/cockpit/$e8c2b091218dbb7f0f9332137588c9b9968ab51cf0accea827e1c337f312eef7/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
kex_exchange_identification: read: Connection reset by peer
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582026590870.136,"url":"http://127.0.0.2:9391/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"16428.42"}
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582026754.354:4): avc:  denied  { write } for  pid=8697 comm="NetworkManager" path="/var/tmp/dracut.iqtGW0/systemd-cat" dev="dm-0" ino=8721163 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2501-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582026754.354:4): avc:  denied  { write } for  pid=8697 comm="NetworkManager" path="/var/tmp/dracut.iqtGW0/systemd-cat" dev="dm-0" ino=8721163 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [459s on 4-cockpit-8]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T11:56:05.304550 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
Times recorded: 1
Latest occurrences:

  • 2020-02-18T11:56:05.304550 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:10196/devtools/browser/5c542195-5733-4974-865f-f90697e74c8e
[0218/144622.159105:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 68129: Permission denied (13)
[0218/144622.174948:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/144622.176519:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/144622.179314:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0218/144622.370197:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 68172: Permission denied (13)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9691\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582037183991.4949,"url":"http://127.0.0.2:9691/cockpit/$00e25af33f7dea3133a8f8a0d7c7a8c25bccbaec0ba21cc89b2318a52429556b/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582037196927.5,"url":"http://127.0.0.2:9691/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"68172.42"}
Connection to 127.0.0.2 closed by remote host.
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
kex_exchange_identification: read: Connection reset by peer
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582037334.967:4): avc:  denied  { write } for  pid=8614 comm="NetworkManager" path="/var/tmp/dracut.3sx6PE/systemd-cat" dev="dm-0" ino=8719946 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2801-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582037334.967:4): avc:  denied  { write } for  pid=8614 comm="NetworkManager" path="/var/tmp/dracut.3sx6PE/systemd-cat" dev="dm-0" ino=8719946 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [385s on centosci-tasks-xcd51]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T14:52:01.384078 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
Times recorded: 1
Latest occurrences:

  • 2020-02-18T14:52:01.384078 | revision 4823220fb6ec2bd622cea4c5c6ae4d848f85177c
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9349/devtools/browser/ec59ca08-b8e9-4955-8c21-b234fdb6c098
[0218/211328.973467:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 17918: Permission denied (13)
[0218/211328.989697:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0218/211328.991681:ERROR:viz_main_impl.cc(180)] Exiting GPU process due to errors during initialization
[0218/211328.995245:WARNING:gpu_process_host.cc(1213)] The GPU process has crashed 1 time(s)
[0218/211329.174152:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 17979: Permission denied (13)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9791\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1582060410773.719,"url":"http://127.0.0.2:9791/cockpit/$0e4636b9f8bb0678fa890067a2421a8abbbbb186206dee1044c55d3f08a0fd69/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1582060425070.961,"url":"http://127.0.0.2:9791/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"17979.42"}
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> warning: transport closed: disconnected
audit: type=1400 audit(1582060560.999:4): avc:  denied  { write } for  pid=8628 comm="NetworkManager" path="/var/tmp/dracut.CT05hu/systemd-cat" dev="dm-0" ino=8719884 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.log
Wrote screenshot to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.png
Wrote HTML dump to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.html
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2901-FAIL.log
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 834, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1022, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1582060560.999:4): avc:  denied  { write } for  pid=8628 comm="NetworkManager" path="/var/tmp/dracut.CT05hu/systemd-cat" dev="dm-0" ino=8719884 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [389s on centosci-tasks-kvsm6]
not ok 65 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-02-18T21:19:10.922005 | revision eecec1e7290cfab2a6546d5f1d3af043075f7c78
Times recorded: 1
Latest occurrences:

  • 2020-02-18T21:19:10.922005 | revision eecec1e7290cfab2a6546d5f1d3af043075f7c78
# ----------------------------------------------------------------------
# testBasic (__main__.TestKdump)
Created symlink /etc/systemd/system/multi-user.target.wants/kdump.service -> /usr/lib/systemd/system/kdump.service.

DevTools listening on ws://127.0.0.1:9805/devtools/browser/19a0c6ae-e1d2-4513-8f1f-23374986c033
[0505/080716.685809:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 17006: Permission denied (13)
[0505/080716.701429:ERROR:egl_util.cc(60)] Failed to load GLES library: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: /usr/lib64/chromium-browser/swiftshader/libGLESv2.so: cannot open shared object file: No such file or directory
[0505/080716.702809:ERROR:viz_main_impl.cc(161)] Exiting GPU process due to errors during initialization
[0505/080716.883662:ERROR:zygote_host_impl_linux.cc(259)] Failed to adjust OOM score of renderer with pid 17045: Permission denied (13)
CDP: {"source":"security","level":"error","text":"Refused to apply inline style because it violates the following Content Security Policy directive: \"default-src 'self' http://127.0.0.2:9291\". Either the 'unsafe-inline' keyword, a hash ('sha256-47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU='), or a nonce ('nonce-...') is required to enable inline execution. Note also that 'style-src' was not explicitly set, so 'default-src' is used as a fallback.\n","timestamp":1588666038549.919,"url":"http://127.0.0.2:9291/cockpit/$ff89e0875a29d8a86b9e440ea314c63d4cd05aa71435e8505c5b11d0f33212cf/shell/index.js","lineNumber":14,"stackTrace":"(minified)"}
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

Generating grub configuration file ...
done
> warning: transport closed: disconnected
CDP: {"source":"network","level":"error","text":"Failed to load resource: net::ERR_EMPTY_RESPONSE","timestamp":1588666048162.492,"url":"http://127.0.0.2:9291/cockpit/static/fonts/RedHatDisplay-Medium.woff2","networkRequestId":"17045.42"}
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
# localhost:22 SSH-2.0-OpenSSH_8.0
> warning: grep: /sys/class/dmi/id/power/autosuspend_delay_ms: Input/output error

> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: nfs dump target isn't formated as server:path
> warning: Unable to apply settings: Directory /var/crash2 isn't writable or doesn't exist.
> warning: loading available updates failed: {"detail":"cannot update repo 'AppStream': Cannot prepare internal mirrorlist: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]; Last error: Curl error (6): Couldn't resolve host name for http://mirrorlist.centos.org/?release=8&arch=x86_64&repo=AppStream&infra=stock [Could not resolve host: mirrorlist.centos.org]","code":64}
> log: health check failed
> warning: transport closed: timeout
audit: type=1400 audit(1588666194.042:4): avc:  denied  { write } for  pid=8643 comm="NetworkManager" path="/var/tmp/dracut.BCyNv6/systemd-cat" dev="dm-0" ino=10250030 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0
Wrote JS log to TestKdump-testBasic-centos-8-stream-127.0.0.2-2401-FAIL.js.log
Journal extracted to TestKdump-testBasic-centos-8-stream-127.0.0.2-2401-FAIL.log.gz
Traceback (most recent call last):
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 911, in tearDown
    self.check_journal_messages()
  File "/build/cockpit-project/bots/make-checkout-workdir/test/common/testlib.py", line 1112, in check_journal_messages
    raise Error("FAIL: Test completed, but found unexpected journal messages:\n" + first)
testlib.Error: FAIL: Test completed, but found unexpected journal messages:
audit: type=1400 audit(1588666194.042:4): avc:  denied  { write } for  pid=8643 comm="NetworkManager" path="/var/tmp/dracut.BCyNv6/systemd-cat" dev="dm-0" ino=10250030 scontext=system_u:system_r:NetworkManager_t:s0 tcontext=system_u:object_r:kdumpctl_tmp_t:s0 tclass=fifo_file permissive=0

# Result testBasic (__main__.TestKdump) failed
# 1 TEST FAILED [393s on centosci-tasks-zkz0w]
not ok 46 test/verify/check-kdump TestKdump.testBasic

First occurrence: 2020-05-05T08:13:03.066600 | revision 9fa8526c4573f51a637c374b34a21dbb11225756
Times recorded: 1
Latest occurrences:

  • 2020-05-05T08:13:03.066600 | revision 9fa8526c4573f51a637c374b34a21dbb11225756

croissanne pushed a commit that referenced this issue Feb 17, 2020
@marusak @croissanne
Add naughty for SELinux preventing NetworkManager from write
dc0c166 
Known issue: #539
@cockpituous cockpituous mentioned this issue Jun 2, 2020
Merged
martinpitt pushed a commit that referenced this issue Jun 2, 2020
@martinpitt
naughty: Close 539: SELinux is preventing NetworkManager from write
de2efe4 
Known issue which has not occurred in 27 days

SELinux is preventing NetworkManager from write

Fixes #539

Closes #923
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
knownissue
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

naughty: Close 539: SELinux is preventing NetworkManager from write
2 participants
@marusak @cockpituous