[rdo-users] [rdo-dev] VMs fail to hard reboot due to permission denied in console.log

[Belmiro Moreira]

Hi,
after CentOS upgrade from 7.3 to 7.4 we are seeing that VMs fail to hard
reboot due to permission denied in console.log

type=AVC msg=audit(1510742012.661:4254): avc:  denied  { unlink } for
 pid=8230 comm="virtlogd" name="console.log" dev="md4" ino=1610669936
scontext=system_u:system_r:virtlogd_t:s0-s0:c0.c1023
tcontext=system_u:object_r:svirt_image_t:s0:c29,c202 tclass=file

We found these two related open bugs:
https://bugzilla.redhat.com/show_bug.cgi?id=1501957
https://bugzilla.redhat.com/show_bug.cgi?id=1499800

Restoring the context of console.log (restorecon -F console.log) fix the
issue but wondering if it's safe to apply this at scale.
Also, when can we expect a formal fix?

thanks,
Belmiro
CERN
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.rdoproject.org/pipermail/users/attachments/20171116/76fd11ce/attachment.html>