World Community Grid - View Thread - Constant SELinux errors from BOINC and WCG.

World Community Grid Forums

Category: Support

Forum: BOINC Agent Support

Thread: Constant SELinux errors from BOINC and WCG.

Quick Go »

No member browsing this thread

Thread Status: Active
Total posts in this thread: 16

[ ]

Author

This topic has been viewed 10362 times and has 15 replies

Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline


Re: Constant SELinux errors from BOINC and WCG.

You should also try clicking the Update Policy button at the bottom of the alert popup.
I have not had any SELinux denials (I run SELinux in Enforcing mode) from BOINC on the WCG project, on any WCG task (IMHO, WCG causes confusion by calling its Tasks "Projects" when WCG is the "Project" from BOINC's point of view), so possibly a Policy Update would fix it... if Miroslav 'adds a fix from the SELinux side' then you would have to update its Policy to get that fix.

[Sep 20, 2011 2:04:00 PM]

JoeZeff
Cruncher
Joined: Dec 31, 2004
Post Count: 33
Status: Offline
Project Badges:

90 day badge for Human Proteome Folding - Phase 2

45 day badge for Help Cure Muscular Dystrophy

14 day badge for Help Fight Childhood Cancer

14 day badge for Help Cure Muscular Dystrophy - Phase 2

45 day badge for The Clean Energy Project - Phase 2

45 day badge for Outsmart Ebola Together

45 day badge for FightAIDS@Home - Phase 2

45 day badge for Microbiome Immunity Project

14 day badge for Africa Rainfall Project

180 day badge for OpenPandemics - COVID-19


Re: Constant SELinux errors from BOINC and WCG.

Sorry, ZoSo, but I don't get that option.

[Sep 20, 2011 7:10:29 PM]

JoeZeff
Cruncher
Joined: Dec 31, 2004
Post Count: 33
Status: Offline
Project Badges:


Re: Constant SELinux errors from BOINC and WCG.

Every time I get a work unit from that project I get a spew of alerts. Either that, or I keep getting warnings from SELinux but the troubleshooter shows nothing. Not only have I managed to abort the unit, I've removed myself from the project. The program's buggy and I have more important things to do than clear redundant alerts caused by a badly-written program.

[Sep 30, 2011 5:41:32 PM]

Former Member
Cruncher
Joined: May 22, 2018
Post Count: 0
Status: Offline


Re: Constant SELinux errors from BOINC and WCG.

If you post the actual messages, screenshot, logs, we might have a starting-point to research this from our POV.

Just to find out, I removed AppArmor and put SELinux on last week shortly after the exchange we had... well whatever is buggy, my Ubuntu 11.04 with 2.6.38.11 kernel with any shell loaded, KDE, GNOME2/3, Unity 2/3D, LightDM, Metacity... no alerts. Even activated the GUFW firewall as that in past gave issue and things continue to hum.

Still no CEP2 tasks? If you select it and the minimum system requirements are met, you'd receive at least 1 (default limit) with preferential treatment. You can briefly force the hand by making CEP2 exclusive [sole selection] and increase the cache temporarily to force a fetch, or get the reason printed in the BOINC message log why not.

--//--

[Sep 30, 2011 6:26:40 PM]

JoeZeff
Cruncher
Joined: Dec 31, 2004
Post Count: 33
Status: Offline
Project Badges:


Re: Constant SELinux errors from BOINC and WCG.

Sorry, but at the end I was getting SELinux alerts but the troubleshooter showed absolutely nothing. I aborted the task, deselected it and went on with my life.

[Oct 1, 2011 6:27:27 PM]

se29592
Cruncher
Joined: Jun 4, 2009
Post Count: 8
Status: Offline


Re: Constant SELinux errors from BOINC and WCG.

Here is a typcial entry of the type I think the author refers to:

Using:
grep wcg_dsfl_6.19_i /var/log/audit/audit.lo


type=AVC msg=audit(1317818445.790:288792): avc:  denied  { search } for  pid=10506 comm="wcg_dsfl_6.19_i" name="12786" dev=proc ino=15287620 scontext=system_u:system_r:boinc_project_t:s0 tcontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tclass=dir
type=AVC msg=audit(1317818445.790:288792): avc:  denied  { read } for  pid=10506 comm="wcg_dsfl_6.19_i" name="stat" dev=proc ino=15287625 scontext=system_u:system_r:boinc_project_t:s0 tcontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tclass=file
type=AVC msg=audit(1317818445.790:288792): avc:  denied  { open } for  pid=10506 comm="wcg_dsfl_6.19_i" name="stat" dev=proc ino=15287625 scontext=system_u:system_r:boinc_project_t:s0 tcontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tclass=file
type=SYSCALL msg=audit(1317818445.790:288792): arch=40000003 syscall=5 success=yes exit=13 a0=ffbcdf54 a1=8000 a2=1b6 a3=0 items=0 ppid=10655 pid=10506 auid=0 uid=489 gid=473 euid=489 suid=489 fsuid=489 egid=473 sgid=473 fsgid=473 tty=(none) ses=592 comm="wcg_dsfl_6.19_i" exe="/var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu" subj=system_u:system_r:boinc_project_t:s0 key=(null)
type=AVC msg=audit(1317818445.790:288793): avc:  denied  { getattr } for  pid=10506 comm="wcg_dsfl_6.19_i" path="/proc/12786/stat" dev=proc ino=15287625 scontext=system_u:system_r:boinc_project_t:s0 tcontext=unconfined_u:system_r:hplip_t:s0-s0:c0.c1023 tclass=file
type=SYSCALL msg=audit(1317818445.790:288793): arch=40000003 syscall=197 success=yes exit=0 a0=d a1=ffbcd9f4 a2=ffbcd97c a3=22 items=0 ppid=10655 pid=10506 auid=0 uid=489 gid=473 euid=489 suid=489 fsuid=489 egid=473 sgid=473 fsgid=473 tty=(none) ses=592 comm="wcg_dsfl_6.19_i" exe="/var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu" subj=system_u:system_r:boinc_project_t:s0 key=(null)


# ls -l /var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu 
-rwxr-xr-x. 1 boinc boinc 1308784 Aug 31 19:49 /var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu
# md5sum /var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu 
bfc0567e367da0b2201028d91d1520d8  /var/lib/boinc/projects/www.worldcommunitygrid.org/wcg_dsfl_6.19_i686-pc-linux-gnu

# rpm -qa boinc\*
boinc-client-static-6.10.58-3.r22930svn.fc14.x86_64
boinc-client-doc-6.10.58-3.r22930svn.fc14.noarch
boinc-client-6.10.58-3.r22930svn.fc14.x86_64
boinc-client-devel-6.10.58-3.r22930svn.fc14.x86_64
boinc-manager-6.10.58-3.r22930svn.fc14.x86_64

[Oct 5, 2011 4:47:05 PM]

[ ]