[ovirt-users] unsupported configuration: Unable to find security driver for model selinux

[Tom Gamull]

This should work but that is a little strange (I’m copying from the suggested action)
-------------
If you believe that qemu-kvm should be allowed getattr access on the a3f29de7-c6b9-410e-b635-9b3016da7ba2 lnk_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep qemu-kvm /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp
———————————

It looks like the qemu-kvm is having access issues on lnk files.

Could you try the above action on node69-02 and see if that resolves the issue? It may be a bug.

> On Oct 12, 2016, at 9:27 AM, Николаев Алексей <alexeynikolaev.post at yandex.ru> wrote:
> 
> 
> 
> 12.10.2016, 15:53, "Tom Gamull" <tgamull at redhat.com <mailto:tgamull at redhat.com>>:
>> Can you set it to permissive and run
>> sealart -a /var/log/audit/audit.log
> 
> 
> Added logs to attachment.
> 
> 
> 
> 
> 
>> 
>> you may need to install selinux tools
>> 
>>> On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил <milo1 at ya.ru <mailto:milo1 at ya.ru>> wrote:
>>> 
>>> Good day,
>>> 
>>> had a similar problem, disabling selinux helped.
>>> 
>>> Best,
>>> Mikhail
>>> 
>>> 11.10.2016, 09:55, "Николаев Алексей" <alexeynikolaev.post at yandex.ru <mailto:alexeynikolaev.post at yandex.ru>>:
>>>> Hi community!
>>>> 
>>>> I have 4 hosts: 2 old servers and 2 new servers
>>>> I have this error trying to migrate VM from new host to old one.
>>>> 
>>>> Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinux
>>>> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinux
>>>> Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012  File "/usr/share/vdsm/virt/migration.py", line 246, in run#012    self._startUnderlyingMigration(time.time())#012  File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012    None, maxBandwidth)#012  File "/usr/share/vdsm/virt/vm.py", line 703, in f#012    ret = attr(*args, **kwargs)#012  File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012    ret = f(*args, **kwargs)#012  File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012    if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux
>>>> 
>>>> Migration from OLD host to another OLD host have not any problems.
>>>> Migration from NEW host to another NEW host have not any problems.
>>>> Migration from OLD host to NEW host have not any problems.
>>>> 
>>>> Migration is not work only from NEW to OLD.
>>>> 
>>>> oVirt Engine Version: 3.5.6.2-1.el6
>>>> 
>>>> All hosts:
>>>> OS Version: RHEL - 7 - 2.1511.el7.centos.2.10
>>>> Kernel Version: 3.10.0 - 327.36.1.el7.x86_64
>>>> KVM Version: 2.3.0 - 29.1.el7
>>>> LIBVIRT Version: libvirt-1.2.17-13.el7_2.5
>>>> VDSM Version: vdsm-4.16.30-0.el7.centos
>>>> 
>>>> Any ideas? Thx.
>>>> ,
>>>> _______________________________________________
>>>> Users mailing list
>>>> Users at ovirt.org <mailto:Users at ovirt.org>
>>>> http://lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/listinfo/users>
>>> 
>>> 
>>> 
>>> _______________________________________________
>>> Users mailing list
>>> Users at ovirt.org <mailto:Users at ovirt.org>
>>> http://lists.ovirt.org/mailman/listinfo/users <http://lists.ovirt.org/mailman/listinfo/users><sealert_node69-02.txt><sealert_node69-06.txt>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ovirt.org/pipermail/users/attachments/20161012/fb614199/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.ovirt.org/pipermail/users/attachments/20161012/fb614199/attachment-0001.sig>