Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-147695

[CUT 9.8 to 10.2] 10_avc_check avc: denied { ioctl } for pid=6497 comm="leapp3" path="/root/tmp_leapp_py3/leapp3"

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • rhel-9.8
    • leapp-repository
    • None
    • None
    • None
    • rhel-upgrades
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      What is the impact of this issue to you?

      Please provide the package NVR for which the bug is seen:

      OS version: RHEL-9.8.0-20260119.1

      How reproducible is this bug?:

      https://beaker.engineering.redhat.com/recipes/20620420#task212001636,task212001638

      Steps to reproduce

      1. Install RHEL-9.8.0-20260119.1 on an beaker server.
      2. Configura some mdadm raid device on the server
      3. Running the leapp trying to upgrade it to RHEL-10.2
      4. Check the OS status, mdadm raid devices , data files , and beaker logs

      Expected results

      After the leapp upgrade , all the mdadm raid device and data should be there , and there shouldn't a Fail in beaker log.

      Actual results

      The OS has been update to RHEL-10.2 successfully,

      All the mdadm raid device and data files are there.

      But there is one beaker job Fail just after the  leapp upgrade

      http://lab-01.beak-001.prod.rdu2.dc.redhat.com/beaker/logs/results/979046+/979046444/avc.log

      // code placeholder
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
selinux-policy-42.1.15-1.el10.noarch
----
time->Fri Feb  6 02:22:39 2026
type=PROCTITLE msg=audit(1770362559.433:106): proctitle="(leapp3)"
type=SYSCALL msg=audit(1770362559.433:106): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffc1b8f8850 a3=1 items=0 ppid=1 pid=6497 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="leapp3" exe="/usr/bin/python3.12" subj=system_u:system_r:init_t:s0 key=(null)
type=AVC msg=audit(1770362559.433:106): avc:  denied  { ioctl } for  pid=6497 comm="leapp3" path="/root/tmp_leapp_py3/leapp3" dev="dm-0" ino=68903991 ioctlcmd=0x5401 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=file permissive=1

       

       

              leapp-notifications leapp-notifications
              fan.fan Fan Fan
              leapp-notifications leapp-notifications
              RHEL Upgrades QE Team RHEL Upgrades QE Team
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: