Project

General

Profile

Actions
Copy link

action #168586

open

action #166613: Yast default selected LSM changes from Apparmor to SELinux, existing openQA test fails in first_boot

[qe-core] test fails in Sysctl

Added by cahu 6 months ago. Updated 3 months ago.

Status:
Workable
Priority:
Normal
Assignee:
dzedro
Category:
Bugs in existing tests
Target version:
-
Start date:
2024-10-21
Due date:
% Done:

0%

Estimated time:
Difficulty:
Tags:
bugbusters

Description

Tumbleweed iso test with SELinux enabled by default, see context:
https://bugzilla.suse.com/show_bug.cgi?id=1230118

also see: https://progress.opensuse.org/issues/166613

test fails because Apparmor is not installed by default:
1 - sysctl: cannot stat /proc/sys/kernel/unprivileged_userns_apparmor_policy: No such file or directory

Observation

openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-sys-param-check@64bit fails in
Sysctl

Test suite description

RAM size is set to 2048, some kernel parameters change with total RAM https://github.com/openSUSE/sys-param-check

Reproducible

Fails since (at least) Build 20230910

Expected result

Last good: 20230908 (or more recent)

Further details

Always latest result in this scenario: latest

Actions
Copy link
 #1

Updated by jlausuch 6 months ago

  • Tags set to sap
Actions
Copy link
 #2

Updated by szarate 6 months ago

  • Parent task set to #166613

Contact @cahu if any questions.

cc @tjyrinki_suse
Looks like for apparmor and security audit testsuites need to be reworked too. #168571 can be rejected in favor of #167662

Actions
Copy link
 #3

Updated by szarate 6 months ago

  • Tags changed from sap, bugbusters to bugbusters
  • Subject changed from test fails in Sysctl to [qe-core] test fails in Sysctl
Actions
Copy link
 #4

Updated by dzedro 6 months ago

  • Status changed from New to In Progress
  • Assignee set to dzedro
Actions
Copy link
 #5

Updated by cahu 6 months ago

just a quick note: for the verification runs you can create an iso as described here:
https://bugzilla.suse.com/show_bug.cgi?id=1230118#c7

Actions
Copy link
 #6

Updated by szarate 5 months ago

Actions
Copy link
 #7

Updated by szarate 5 months ago

  • Status changed from In Progress to Resolved
Actions
Copy link
 #8

Updated by cahu 3 months ago

  • Status changed from Resolved to Workable

Hi, I reran the ISO tests with SELinux enabled by default and this is unfortunately not fixed:

https://openqa.opensuse.org/tests/4762734#step/Sysctl/161

Could you have another look? Thanks!

Actions
Copy link

Also available in: Atom PDF