Project

General

Profile

action #115730

[security] test fails in apache2_changehat - there are denied records found in /var/log/audit/audit.log

Added by punkioudi 3 months ago. Updated 3 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
Bugs in existing tests
Target version:
-
Start date:
2022-08-25
Due date:
% Done:

0%

Estimated time:
Difficulty:

Description

While verifying the audit log if it contains no "DENIED" "adminer" change hat operations, there were 4 denied found:
There are denied file_receive records found in /var/log/audit/audit.log
There are denied open records found in /var/log/audit/audit.log
There are denied signal records found in /var/log/audit/audit.log
There are denied signal records found in /var/log/audit/audit.log

It happens in all 4 architectures: x86_64, s390x, ppc64le, aarch64

Acceptance Criteria

  1. Identify if this is a test issue or a product bug
  2. If it is a product bug, report it under: SUSE Linux Enterprise Server 15 SP5
  3. If it is a test issue, provide the fix and run Verification runs both in product development runs and maintenance

Observation

openQA test in scenario sle-15-SP5-Online-x86_64-apparmor_profile@64bit fails in
apache2_changehat

Test suite description

Maintainer: llzhao@suse.com
Test AppArmor profiles with an existing disk image.

Reproducible

Fails since (at least) Build 15.2 (current job)

Expected result

Last good: (unknown) (or more recent)

Further details

Always latest result in this scenario: latest

History

#1 Updated by punkioudi 3 months ago

  • Description updated (diff)

#2 Updated by punkioudi 3 months ago

  • Status changed from New to In Progress
  • Assignee set to punkioudi

#3 Updated by punkioudi 3 months ago

There is already an open [bug] for this issue, since sles 15-sp4 development.
There is nothing to correct in the testsuite, the bug can be linked till the issue is solved.

#4 Updated by punkioudi 3 months ago

  • Status changed from In Progress to Resolved

Also available in: Atom PDF