<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">This should work but that is a little strange (I’m copying from the suggested action)<div class="">-------------<br class=""><div class=""><div class="">If you believe that qemu-kvm should be allowed getattr access on the a3f29de7-c6b9-410e-b635-9b3016da7ba2 lnk_file by default.</div><div class="">Then you should report this as a bug.</div><div class="">You can generate a local policy module to allow this access.</div><div class="">Do</div><div class="">allow this access for now by executing:</div><div class=""><b class=""># grep qemu-kvm /var/log/audit/audit.log | audit2allow -M mypol</b></div><div class=""><b class=""># semodule -i mypol.pp</b></div>
———————————</div><div class=""><br class=""></div><div class="">It looks like the qemu-kvm is having access issues on lnk files.</div><div class=""><br class=""></div><div class="">Could you try the above action on node69-02 and see if that resolves the issue? It may be a bug.</div><div class=""><br class=""><div><blockquote type="cite" class=""><div class="">On Oct 12, 2016, at 9:27 AM, Николаев Алексей <<a href="mailto:alexeynikolaev.post@yandex.ru" class="">alexeynikolaev.post@yandex.ru</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">12.10.2016, 15:53, "Tom Gamull" <<a href="mailto:tgamull@redhat.com" class="">tgamull@redhat.com</a>>:</div><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><div class="">Can you set it to permissive and run<div class="">sealart -a /var/log/audit/audit.log</div></div></blockquote><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Added logs to attachment.</div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""> </div><blockquote type="cite" style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><div class=""><div class=""> </div><div class="">you may need to install selinux tools</div><div class=""> </div><div class=""><div class=""><blockquote type="cite" class=""><div class="">On Oct 12, 2016, at 4:49 AM, Краснобаев Михаил <<a href="mailto:milo1@ya.ru" class="">milo1@ya.ru</a>> wrote:</div> <div class=""><div class="">Good day,</div><div class=""> </div><div class="">had a similar problem, disabling selinux helped.</div><div class=""> </div><div class="">Best,</div><div class="">Mikhail</div><div class=""> </div><div class="">11.10.2016, 09:55, "Николаев Алексей" <<a href="mailto:alexeynikolaev.post@yandex.ru" class="">alexeynikolaev.post@yandex.ru</a>>:</div><blockquote type="cite" class=""><div class="">Hi community!</div><div class=""> </div><div class="">I have 4 hosts: 2 old servers and 2 new servers</div><div class="">I have this error trying to migrate VM from new host to old one.</div><div class=""> </div><div class=""><div class="">Oct 11 09:25:05 node69-06 journal: unsupported configuration: Unable to find security driver for model selinux</div><div class="">Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::unsupported configuration: Unable to find security driver for model selinux</div><div class="">Oct 11 09:25:05 node69-06 journal: vdsm vm.Vm ERROR vmId=`a9473a99-32c6-4548-8b85-dafe4ce8f94f`::Failed to migrate#012Traceback (most recent call last):#012 File "/usr/share/vdsm/virt/migration.py", line 246, in run#012 self._startUnderlyingMigration(time.time())#012 File "/usr/share/vdsm/virt/migration.py", line 335, in _startUnderlyingMigration#012 None, maxBandwidth)#012 File "/usr/share/vdsm/virt/vm.py", line 703, in f#012 ret = attr(*args, **kwargs)#012 File "/usr/lib/python2.7/site-packages/vdsm/libvirtconnection.py", line 119, in wrapper#012 ret = f(*args, **kwargs)#012 File "/usr/lib64/python2.7/site-packages/libvirt.py", line 1825, in migrateToURI2#012 if ret == -1: raise libvirtError ('virDomainMigrateToURI2() failed', dom=self)#012libvirtError: unsupported configuration: Unable to find security driver for model selinux</div><div class=""> </div><div class="">Migration from OLD host to another OLD host have not any problems.</div><div class="">Migration from NEW host to another NEW host have not any problems.</div><div class="">Migration from OLD host to NEW host have not any problems.</div><div class=""> </div><div class="">Migration is not work only from NEW to OLD.</div><div class=""> </div><div class=""><span class="">oVirt Engine Version: 3.5.6.2-1.el6</span></div><div class=""> </div><div class=""><span class="">All hosts:</span></div><div class="">OS Version: RHEL - 7 - 2.1511.el7.centos.2.10</div><div class="">Kernel Version: 3.10.0 - 327.36.1.el7.x86_64</div><div class="">KVM Version: 2.3.0 - 29.1.el7</div><div class="">LIBVIRT Version: libvirt-1.2.17-13.el7_2.5</div><div class="">VDSM Version: vdsm-4.16.30-0.el7.centos</div><div class=""> </div><div class="">Any ideas? Thx.</div></div>,<p class="">_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class=""><a href="http://lists.ovirt.org/mailman/listinfo/users" class="">http://lists.ovirt.org/mailman/listinfo/users</a></p></blockquote><div class=""> </div><div class=""> </div><div class=""> <div class=""> </div></div>_______________________________________________<br class="">Users mailing list<br class=""><a href="mailto:Users@ovirt.org" class="">Users@ovirt.org</a><br class=""><a href="http://lists.ovirt.org/mailman/listinfo/users" class="">http://lists.ovirt.org/mailman/listinfo/users</a></div></blockquote></div></div></div></blockquote><span id="cid:273113FB-D482-49C0-957F-4203E7943E93@gamull.com"><sealert_node69-02.txt></span><span id="cid:DCE50362-542D-44C6-A780-5204315C880C@gamull.com"><sealert_node69-06.txt></span></div></blockquote></div><br class=""></div></div></body></html>