Project

General

Profile

Actions

action #167662

open

action #166613: Yast default selected LSM changes from Apparmor to SELinux, existing openQA test fails in first_boot

[security][tumbleweed] test fails in aa_enforce: audit 4.0 changes need adaption

Added by dimstar 27 days ago. Updated 5 days ago.

Status:
Workable
Priority:
Normal
Assignee:
-
Category:
Bugs in existing tests
Target version:
-
Start date:
2024-10-01
Due date:
% Done:

0%

Estimated time:
Difficulty:

Description

Observation

Failed to restart auditd.service: Operation refused, unit auditd.service may be requested by dependency only (it is configured to refuse manual start/stop).
See system logs and 'systemctl status auditd.service' for details.
YxdDO-4-

auditd.service has: RefuseManualStop=yes

The service that can be restarted with Audit 4.0 is audit-rules; from the upstream changelog:

One of the main features is the separation of loading rules and logging
events into separate services, audit-rules.service and auditd.service.

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-apparmor@64bit fails in
aa_enforce

Test suite description

Maintainer: QE Security; test AppArmor tool with an existing disk image.

Reproducible

Fails since (at least) Build 20231102

Expected result

Last good: 20231020 (or more recent)

Further details

Always latest result in this scenario: latest


Related issues 1 (0 open1 closed)

Related to openQA Tests - action #165686: perl-Bootloader package is now update-bootloader in TumbleweedResolvedcvidot2024-08-22

Actions
Actions

Also available in: Atom PDF