action #167662
openaction #166613: Yast default selected LSM changes from Apparmor to SELinux, existing openQA test fails in first_boot
[security][tumbleweed] test fails in aa_enforce: audit 4.0 changes need adaption
0%
Description
Observation¶
Failed to restart auditd.service: Operation refused, unit auditd.service may be requested by dependency only (it is configured to refuse manual start/stop).
See system logs and 'systemctl status auditd.service' for details.
YxdDO-4-
auditd.service has: RefuseManualStop=yes
The service that can be restarted with Audit 4.0 is audit-rules; from the upstream changelog:
One of the main features is the separation of loading rules and logging
events into separate services, audit-rules.service and auditd.service.
openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor@64bit fails in
aa_enforce
Test suite description¶
Maintainer: QE Security; test AppArmor tool with an existing disk image.
Reproducible¶
Fails since (at least) Build 20231102
Expected result¶
Last good: 20231020 (or more recent)
Further details¶
Always latest result in this scenario: latest
Updated by dimstar 27 days ago
This ticket serves as placeholder for all issues around audit 4 service restarts. It has been observed in those tests so far:
- https://openqa.opensuse.org/tests/4524944
- https://openqa.opensuse.org/tests/4524941
- https://openqa.opensuse.org/tests/4524940
- https://openqa.opensuse.org/tests/4524939
- https://openqa.opensuse.org/tests/4524937
- https://openqa.opensuse.org/tests/4524935
- https://openqa.opensuse.org/tests/4524943
- https://openqa.opensuse.org/tests/4524936
Updated by dimstar 27 days ago
The previous fix was merged - some missing parts:
- https://openqa.opensuse.org/tests/4525310#step/auditd/8
- https://openqa.opensuse.org/tests/4525310#step/autrace/11 (autrace: command not found) => The auvirt and autrace programs have been dropped
Updated by slo-gin 20 days ago
This ticket was set to Urgent priority but was not updated within the SLO period. Please consider picking up this ticket or just set the ticket to the next lower priority.
Updated by szarate 20 days ago
- Related to action #165686: perl-Bootloader package is now update-bootloader in Tumbleweed added
Updated by slo-gin 13 days ago
- Priority changed from Urgent to High
This ticket was set to Urgent priority but was not updated within the SLO period. The ticket will be set to the next lower priority High.
Updated by tjyrinki_suse 5 days ago
- Tags set to apparmor
- Subject changed from test fails in aa_enforce: audit 4.0 changes need adaption to [security][tumbleweed] test fails in aa_enforce: audit 4.0 changes need adaption
- Status changed from New to Workable
- Assignee deleted (
tjyrinki_suse) - Priority changed from High to Normal