Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-147696

[CUT 8.10 to 9.8] 10_avc_check avc: denied { ioctl } for pid=5242 comm="leapp3" path="/root/tmp_leapp_py3/leapp3"

Linking RHIVOS CVEs to...Migration: Automation ...Sync from "Extern...XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Duplicate
    • Icon: Undefined Undefined
    • None
    • rhel-8.10.z
    • leapp-repository
    • None
    • None
    • None
    • rhel-upgrades
    • None
    • False
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • Unspecified
    • Unspecified
    • Unspecified
    • None

      What were you trying to do that didn't work?

      What is the impact of this issue to you?

      Please provide the package NVR for which the bug is seen:

      OS version   RHEL-8.10.0-updates-20260119.1 BaseOS x86_64

      How reproducible is this bug?:

      https://beaker.engineering.redhat.com/recipes/20557911#task211388099

      Steps to reproduce

      1. Install RHEL-8.10.0-updates-20260119.1 BaseOS on an beaker server.
      2. Configura some mdadm raid device on the server
      3. Running the leapp trying to upgrade it to RHEL-9.8
      4. Check the OS status, mdadm raid devices , data files , and beaker logs
      5.  

      Expected results

      After the leapp upgrade , all the mdadm raid device and data should be there , and there shouldn't a Fail in beaker log.

      Actual results

      The OS has been update to RHEL-9.8 successfully,

      All the mdadm raid device and data files are there.

      But there is one beaker job Fail just after the  leapp upgrade

      https://beaker-archive.prod.engineering.redhat.com/beaker-logs/2026/01/122562/12256255/20557911/211388099/976449000/avc.log

       

      // code placeholder
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
selinux-policy-38.1.72-1.el9.noarch
----
time->Wed Jan 28 21:18:14 2026
type=PROCTITLE msg=audit(1769653094.172:69): proctitle="(leapp3)"
type=SYSCALL msg=audit(1769653094.172:69): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7ffe129e3320 a3=70cd665faba17e0b items=0 ppid=1 pid=5242 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="leapp3" exe="/usr/bin/python3.9" subj=system_u:system_r:init_t:s0 key=(null)
type=AVC msg=audit(1769653094.172:69): avc:  denied  { ioctl } for  pid=5242 comm="leapp3" path="/root/tmp_leapp_py3/leapp3" dev="dm-0" ino=135378043 ioctlcmd=0x5401 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=file permissive=1

              leapp-notifications leapp-notifications
              fan.fan Fan Fan
              leapp-notifications leapp-notifications
              RHEL Upgrades QE Team RHEL Upgrades QE Team
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: