https://bugzilla.redhat.com/show_bug.cgi?id=1228918
Bug ID: 1228918
Summary: selinux denies rsyslog logging to elasticsearch via
rsyslog-elasticsearch
Product: Fedora
Version: 22
Component: elasticsearch
Assignee: jvanek(a)redhat.com
Reporter: david(a)algorithmicarmada.com
QA Contact: extras-qa(a)fedoraproject.org
CC: bkabrda(a)redhat.com, bobjensen(a)gmail.com,
java-sig-commits(a)lists.fedoraproject.org,
jvanek(a)redhat.com, pbrobinson(a)gmail.com,
zbyszek(a)in.waw.pl
Created attachment 1035659
--> https://bugzilla.redhat.com/attachment.cgi?id=1035659&action=edit
/etc/rsyslog.d/elasticsearch.conf
Description of problem:
The package rsyslog-elasticsearch is broken out-of-the-box. rsyslog attempting
to log to elasticsearch results in the following AVC denials if NIS_ENABLED is
off:
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=734 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=734 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=0
Jun 6 10:50:11 geth01 audit: <audit-1400> avc: denied { name_connect } for
pid=731 comm=72733A616374696F6E203120717565 dest=9200
scontext=system_u:system_r:syslogd_t:s0
Installation of the package rsyslog-elasticsearch should allow rsyslog to
connect to elasticsearch's particular port, without opening rsyslog to all
ports, and also without impacting other installed programs.
Version-Release number of selected component (if applicable):
Fedora 22 Server
$ dnf list elasticsearch rsyslog-elasticsearch rsyslog
Last metadata expiration check performed 0:06:09 ago on Sat Jun 6 12:05:59
2015.
Installed Packages
elasticsearch.noarch 1.5.2-0.fc22
@System
rsyslog.x86_64 8.8.0-2.fc22
@System
rsyslog-elasticsearch.x86_64 8.8.0-2.fc22
@System
How reproducible:
Very.
Steps to Reproduce:
1. Install elasticsearch and rsyslog-elasticsearch. I'm using a cluster of 2
machines, but that shouldn't matter.
2. Ensure the SELinux bool nis_enabled is off. This was the case without my
intervention.
3. Configure rsylog as per the attached configuration (separate file in
/etc/rsyslog.d/)
Actual results:
AVC denials in /var/log/messages, no index created in elasticsearch.
Expected results:
Indices should be created in elasticsearch while messages are logged, AVC
should not deny rsyslog's connections, nothing noteworthy should be logged in
/var/log/messages.
Note that if rsyslog-elasticsearch is not installed, rsyslog should not be
allowed to connect to port 9200 (without nis_enabled being set), regardless of
whether elasticsearch is installed.
Additional info:
- I'm using a bare-metal cluster of 2 computers for elasticsearch, both of
which should be configured identically, courtesy of ansible.
- Elasticsearch configuration specified the network name as the host name.
- Elasticsearch configuration specifies a non-default cluster name.
- Elasticsearch uses a few ports other than 9200. I know of 9300, can't find a
documented list at the moment.
- I do have the logstash repository from www.elastic.co setup, but should not
be using packages from it.
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=C512Oqx7ra&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1207586
Bug ID: 1207586
Summary: groovy18: broken -cp option
Product: Fedora
Version: 21
Component: groovy18
Assignee: puntogil(a)libero.it
Reporter: msrb(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com, puntogil(a)libero.it
Description of problem:
The problem described in #810885 seems also be present in groovy18.
Version-Release number of selected component (if applicable):
groovy18-1.8.9-14.fc21
How reproducible:
always
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=nBNFIWsHRX&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1147955
Bug ID: 1147955
Summary: jenkins: Requirement for free space under /tmp is too
strict
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Description of problem:
Jenkins needs enough free space in /tmp (by default 1 GB), otherwise it is
auto-disabling particular node. I think it makes sense on systems with /tmp
mounted on physical partition, but given that Fedora default /tmp is tmpfs I
think that this setting should be disabled or lowered from 1 GB to something
like 100 MB.
Version-Release number of selected component (if applicable):
1.581-2
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=1P2w5iUXb6&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1147879
Bug ID: 1147879
Summary: jenkins: cannot mock Stapler request public abstract
long
javax.servlet.ServletRequest.getContentLengthLong()
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Description of problem:
After going to People page in webapp, an exception appears in jenkins.log
Version-Release number of selected component (if applicable):
1.581-2
Steps to Reproduce:
Go to People page in jenkins webapp, like
http://192.168.122.31:8080/asynchPeople/
Actual results:
jenkins.log contains:
Sep 30, 2014 10:44:06 AM jenkins.util.ProgressiveRendering createMockRequest
WARNING: cannot mock Stapler request public abstract long
javax.servlet.ServletRequest.getContentLengthLong()
java.lang.reflect.InvocationTargetException
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:483)
at
jenkins.util.ProgressiveRendering.createMockRequest(ProgressiveRendering.java:137)
at jenkins.util.ProgressiveRendering.start(ProgressiveRendering.java:96)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
at
sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
at
sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
at java.lang.reflect.Method.invoke(Method.java:483)
at
org.apache.commons.beanutils.MethodUtils.invokeMethod(MethodUtils.java:278)
at org.apache.commons.jelly.tags.core.InvokeTag.doTag(InvokeTag.java:97)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:269)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$2.run(CoreTagLibrary.java:105)
at
org.kohsuke.stapler.jelly.CallTagLibScript.run(CallTagLibScript.java:120)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$2.run(CoreTagLibrary.java:105)
at
org.kohsuke.stapler.jelly.CallTagLibScript.run(CallTagLibScript.java:120)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.CallTagLibScript$1.run(CallTagLibScript.java:99)
at
org.apache.commons.jelly.tags.define.InvokeBodyTag.doTag(InvokeBodyTag.java:91)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:269)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$1.run(CoreTagLibrary.java:98)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$2.run(CoreTagLibrary.java:105)
at
org.kohsuke.stapler.jelly.CallTagLibScript.run(CallTagLibScript.java:120)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.CallTagLibScript$1.run(CallTagLibScript.java:99)
at
org.apache.commons.jelly.tags.define.InvokeBodyTag.doTag(InvokeBodyTag.java:91)
at org.apache.commons.jelly.impl.TagScript.run(TagScript.java:269)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.kohsuke.stapler.jelly.ReallyStaticTagLibrary$1.run(ReallyStaticTagLibrary.java:99)
at org.apache.commons.jelly.impl.ScriptBlock.run(ScriptBlock.java:95)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$2.run(CoreTagLibrary.java:105)
at
org.kohsuke.stapler.jelly.CallTagLibScript.run(CallTagLibScript.java:120)
at
org.apache.commons.jelly.tags.core.CoreTagLibrary$2.run(CoreTagLibrary.java:105)
at org.kohsuke.stapler.jelly.JellyViewScript.run(JellyViewScript.java:81)
at
org.kohsuke.stapler.jelly.DefaultScriptInvoker.invokeScript(DefaultScriptInvoker.java:63)
at
org.kohsuke.stapler.jelly.DefaultScriptInvoker.invokeScript(DefaultScriptInvoker.java:53)
at org.kohsuke.stapler.jelly.JellyFacet$1.dispatch(JellyFacet.java:95)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)
at org.kohsuke.stapler.MetaClass$6.doDispatch(MetaClass.java:248)
at
org.kohsuke.stapler.NameBasedDispatcher.dispatch(NameBasedDispatcher.java:53)
at org.kohsuke.stapler.Stapler.tryInvoke(Stapler.java:728)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:858)
at org.kohsuke.stapler.Stapler.invoke(Stapler.java:631)
at org.kohsuke.stapler.Stapler.service(Stapler.java:225)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:684)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1496)
at hudson.util.PluginServletFilter$1.doFilter(PluginServletFilter.java:96)
at hudson.util.PluginServletFilter.doFilter(PluginServletFilter.java:102)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1484)
at hudson.security.csrf.CrumbFilter.doFilter(CrumbFilter.java:48)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1484)
at
hudson.security.ChainedServletFilter$1.doFilter(ChainedServletFilter.java:84)
at
hudson.security.ChainedServletFilter.doFilter(ChainedServletFilter.java:90)
at hudson.security.HudsonFilter.doFilter(HudsonFilter.java:164)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1484)
at
org.kohsuke.stapler.compression.CompressionFilter.doFilter(CompressionFilter.java:46)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1484)
at
hudson.util.CharacterEncodingFilter.doFilter(CharacterEncodingFilter.java:81)
at
org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1476)
at
org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:499)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:137)
at
org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:533)
at
org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:231)
at
org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1086)
at
org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:428)
at
org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:193)
at
org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1020)
at
org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:135)
at
org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:116)
at org.eclipse.jetty.server.Server.handle(Server.java:370)
at
org.eclipse.jetty.server.AbstractHttpConnection.handleRequest(AbstractHttpConnection.java:494)
at
org.eclipse.jetty.server.AbstractHttpConnection.headerComplete(AbstractHttpConnection.java:971)
at
org.eclipse.jetty.server.AbstractHttpConnection$RequestHandler.headerComplete(AbstractHttpConnection.java:1033)
at org.eclipse.jetty.http.HttpParser.parseNext(HttpParser.java:644)
at org.eclipse.jetty.http.HttpParser.parseAvailable(HttpParser.java:235)
at
org.eclipse.jetty.server.AsyncHttpConnection.handle(AsyncHttpConnection.java:82)
at
org.eclipse.jetty.io.nio.SelectChannelEndPoint.handle(SelectChannelEndPoint.java:667)
at
org.eclipse.jetty.io.nio.SelectChannelEndPoint$1.run(SelectChannelEndPoint.java:52)
at winstone.BoundedExecutorService$1.run(BoundedExecutorService.java:77)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
Caused by: java.lang.AbstractMethodError:
org.eclipse.jetty.server.Request.getContentLengthLong()J
... 97 more
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=guAZBosUXv&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1147838
Bug ID: 1147838
Summary: jenkins: missing core plugins
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: msrb(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Description of problem:
Jenkins upstream bundles several plugins which used to be part of jenkins core.
Fedora should do the same.
Upstream WAR file contains:
ant.hpi
antisamy-markup-formatter.hpi
credentials.hpi
cvs.hpi
external-monitor-job.hpi
javadoc.hpi
junit.hpi
ldap.hpi
mailer.hpi
matrix-auth.hpi
matrix-project.hpi
maven-plugin.hpi
pam-auth.hpi
ssh-credentials.hpi
ssh-slaves.hpi
subversion.hpi
translation.hpi
windows-slaves.hpi
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=n51XhdWxRj&a=cc_unsubscribe
https://bugzilla.redhat.com/show_bug.cgi?id=1147833
Bug ID: 1147833
Summary: jenkins: Dependency bloat
Product: Fedora
Version: 21
Component: jenkins
Assignee: msrb(a)redhat.com
Reporter: mizdebsk(a)redhat.com
QA Contact: extras-qa(a)fedoraproject.org
CC: java-sig-commits(a)lists.fedoraproject.org,
msrb(a)redhat.com
Created attachment 942617
--> https://bugzilla.redhat.com/attachment.cgi?id=942617&action=edit
dnf log
Description of problem:
Jenkins seems to have a lot of unnecessary dependencies. When installed it
takes 400 MB of disk space (with dependencies, but without OpenJDK).
Upstream binary rpm is 95 MB (66 MB installed).
Total download size: 241 M
Installed size: 397 M
Version-Release number of selected component (if applicable):
1.581-2
Steps to Reproduce:
1. dnf install jenkins
Actual results:
see attachement
--
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=mZvWdEQAiJ&a=cc_unsubscribe