Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Ensure that qubesdb SELinux labels are correct on Fedora 41 #120

Merged
merged 1 commit into from
Dec 25, 2024

Conversation

DemiMarie
Copy link
Contributor

/usr/sbin is now considered an alias for /usr/bin, so include rules for /usr/bin to ensure correct labelling. Do not remove the old rules to avoid regression on Fedora 40.

Suggested-by: Marek Marczykowski-Górecki [email protected]
Part-of: QubesOS/qubes-issues#9663

/usr/sbin is now considered an alias for /usr/bin, so include rules for
/usr/bin to ensure correct labelling.  Do not remove the old rules to
avoid regression on Fedora 40.

Suggested-by: Marek Marczykowski-Górecki <[email protected]>
Part-of: QubesOS/qubes-issues#9663
@qubesos-bot
Copy link

qubesos-bot commented Dec 23, 2024

OpenQA test summary

Complete test suite and dependencies: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2024122415-4.3&flavor=pull-requests

Test run included the following:

New failures, excluding unstable

Compared to: https://openqa.qubes-os.org/tests/overview?distri=qubesos&version=4.3&build=2024111705-4.3&flavor=update

  • system_tests_network_updates

  • system_tests_dispvm

    • TC_20_DispVM_whonix-workstation-17: test_030_edit_file (failure)
      AssertionError: b'test1\n' != b'Test test 2\ntest1\n'
  • system_tests_kde_gui_interactive

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: qr/JmOTS-\d+-/...

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: "# "...

  • system_tests_guivm_gui_interactive

    • gui_keyboard_layout: Failed (test died)
      # Test died: command 'test "$(qvm-run --nogui -p sys-gui 'ls e1*')"...

    • gui_keyboard_layout: unnamed test (unknown)

Failed tests

8 failures
  • system_tests_network_updates

  • system_tests_dispvm

    • TC_20_DispVM_whonix-workstation-17: test_030_edit_file (failure)
      AssertionError: b'test1\n' != b'Test test 2\ntest1\n'
  • system_tests_kde_gui_interactive

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: "echo -e '[Layout]\nLayoutList=us,de' | sud...

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: qr/JmOTS-\d+-/...

    • gui_keyboard_layout: Failed (test died + timed out)
      # Test died: command 'echo -e '[Layout]...

    • gui_keyboard_layout: wait_serial (wait serial expected)
      # wait_serial expected: "# "...

  • system_tests_guivm_gui_interactive

    • gui_keyboard_layout: Failed (test died)
      # Test died: command 'test "$(qvm-run --nogui -p sys-gui 'ls e1*')"...

    • gui_keyboard_layout: unnamed test (unknown)

Fixed failures

Compared to: https://openqa.qubes-os.org/tests/119126#dependencies

3 fixed
  • system_tests_extra

    • TC_00_QVCTest_whonix-gateway-17: test_010_screenshare (failure)
      ~~~~~~~~~~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^... AssertionError: 0 == 0
  • system_tests_basic_vm_qrexec_gui_zfs

    • switch_pool: Failed (test died)
      # Test died: command 'dnf install -y ./zfs-release.rpm' failed at /...
  • system_tests_audio@hw1

Unstable tests

  • system_tests_update

    update2/Failed (1/5 times with errors)
    • job 121711 # Test died: command '(set -o pipefail; qubesctl --show-output stat...
  • system_tests_update@hw1

    update2/Failed (1/5 times with errors)
    • job 121711 # Test died: command '(set -o pipefail; qubesctl --show-output stat...
  • system_tests_update@hw7

    update2/Failed (1/5 times with errors)
    • job 121711 # Test died: command '(set -o pipefail; qubesctl --show-output stat...

@marmarek
Copy link
Member

The update fails this way:

[2024-12-23 06:17:29] [  128.298218] systemd-coredump[5342]: Process 959 (python3) of user 0 terminated abnormally with signal 11/SEGV, processing...
[2024-12-23 06:17:29] [  128.303872] systemd[1]: Created slice system-systemd\x2dcoredump.slice - Slice /system/systemd-coredump.
[2024-12-23 06:17:29] [  128.311855] systemd[1]: Started [email protected] - Process Core Dump (PID 5342/UID 0).
[2024-12-23 06:17:30] [  128.533764] abrt-dump-journal-core[585]: Failed to obtain all required information from journald
[2024-12-23 06:17:30] [  128.794611] (sd-parse-elf)[5344]: �[0;1;38:5:185mCould not parse number of program headers from core file: invalid `Elf' handle�[0m
[2024-12-23 06:17:30] [  128.830134] systemd-coredump[5343]: �[0;1;31mProcess 959 (python3) of user 0 dumped core.
[2024-12-23 06:17:30] 
[2024-12-23 06:17:30] Module /usr/lib64/ld-linux-x86-64.so.2 (deleted) without build-id.
[2024-12-23 06:17:30] Module /usr/lib64/ld-linux-x86-64.so.2 (deleted)
[2024-12-23 06:17:30] Module _datetime.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module binascii.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module _struct.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module liblzma.so.5 from rpm xz-5.6.2-2.fc41.x86_64
[2024-12-23 06:17:30] Module _lzma.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module libbz2.so.1 from rpm bzip2-1.0.8-19.fc41.x86_64
[2024-12-23 06:17:30] Module _bz2.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module libz.so.1 from rpm zlib-ng-2.1.7-3.fc41.x86_64
[2024-12-23 06:17:30] Module zlib.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module _opcode.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module grp.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module math.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module select.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module _posixsubprocess.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module fcntl.cpython-313-x86_64-linux-gnu.so from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module libpython3.13.so.1.0 from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Module python3.13 from rpm python3.13-3.13.1-2.fc41.x86_64
[2024-12-23 06:17:30] Stack trace of thread 959:
[2024-12-23 06:17:30] #0  0x00007ed9a3b2bb22 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #1  0x00007ed9a3b2d03c n/a (n/a + 0x0)
[2024-12-23 06:17:30] #2  0x00007ed9a2f27eba n/a (_datetime.cpython-313-x86_64-linux-gnu.so + 0x3eba)
[2024-12-23 06:17:30] #3  0x00007ed9a3c22ff5 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #4  0x00007ed9a3c285a0 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #5  0x00007ed9a3b6ea7f n/a (n/a + 0x0)
[2024-12-23 06:17:30] #6  0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #7  0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #8  0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #9  0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #10 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #11 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #12 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #13 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #14 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #15 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #16 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #17 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #18 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #19 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #20 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #21 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #22 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #23 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #24 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #25 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #26 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #27 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #28 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #29 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #30 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #31 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #32 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #33 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #34 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #35 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #36 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #37 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #38 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #39 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #40 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #41 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #42 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #43 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #44 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #45 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #46 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #47 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #48 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #49 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #50 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #51 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #52 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #53 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #54 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #55 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #56 0x00007ed9a3ba59be n/a (n/a + 0x0)
[2024-12-23 06:17:30] #57 0x00007ed9a3ba4c10 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #58 0x00007ed9a3b53f43 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #59 0x00007ed9a3c1b58b n/a (n/a + 0x0)
[2024-12-23 06:17:30] #60 0x00007ed9a3c36104 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #61 0x00007ed9a3b66f27 n/a (n/a + 0x0)
[2024-12-23 06:17:30] #62 0x00007ed9a3b5206a n/a (n/a + 0x0)
[2024-12-23 06:17:30] #63 0x00007ed9a3b6edd8 n/a (n/a + 0x0)
[2024-12-23 06:17:30] ELF object binary architecture: AMD x86-64
[2024-12-23 06:17:30] �[0m
[2024-12-23 06:17:30] [  128.849334] systemd[1]: [email protected]: Deactivated successfully.
[2024-12-23 06:17:30] [  128.967824] systemd[1]: session-9.scope: Deactivated successfully.
[2024-12-23 06:17:30] [  128.969703] qrexec-agent[941]: pam_unix(qrexec:session): session closed for user root
[2024-12-23 06:17:30] [  128.969938] qrexec-agent[938]: 2024-12-23 06:17:30.559 qrexec-agent[938]: qrexec-agent-data.c:288:handle_new_process_common: pid 941 exited with 139
[2024-12-23 06:17:30] [  128.971630] systemd[1]: �[0;1;39msession-9.scope: Consumed 38.920s CPU time, 758.3M memory peak, 9.7M memory swap peak.�[0m

I have no idea (yet) whether it's caused by selinux or something else. I don't see any related selinux denials in the log.

@marmarek
Copy link
Member

Crash is unrelated to this PR. https://bugzilla.redhat.com/show_bug.cgi?id=2333852

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
openqa-pending PR to be tested in the next OpenQA run
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants