[SERVER-64065] connection_status test fails under selinux Created: 28/Feb/22  Updated: 29/Oct/23  Resolved: 01/Apr/22

Status: Closed
Project: Core Server
Component/s: None
Affects Version/s: None
Fix Version/s: 5.3.2, 6.0.0-rc0

Type: Bug Priority: Major - P3
Reporter: Sergey Galtsev (Inactive) Assignee: Sergey Galtsev (Inactive)
Resolution: Fixed Votes: 0
Labels: None
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Issue Links:
Backports
Depends
Related
related to SERVER-65175 on selinux some core test fail due to... Closed
Backwards Compatibility: Fully Compatible
Operating System: ALL
Backport Requested:
v5.3, v5.2
Sprint: Security 2022-03-07, Security 2022-03-21, Security 2022-04-04
Participants:
Linked BF Score: 174

 Description   

Examples:

https://evergreen.mongodb.com/task_log_raw/mongodb_mongo_master_rhel70_selinux_rhel7_org_cd92f1325982f82314e0cbb08ced8d254198a7b2_22_02_26_14_34_46/0?type=T&text=true

 

https://evergreen.mongodb.com/task_log_raw/mongodb_mongo_master_enterprise_rhel_70_64_bit_selinux_rhel7_enterprise_59df956365a44cc63e2d3c55d1734ee960891a8b_22_02_27_05_39_14/0?type=T&text=true

 

https://evergreen.mongodb.com/task_log_raw/mongodb_mongo_master_enterprise_rhel_80_64_bit_suggested_selinux_rhel8_enterprise_1d009ac1fe9e1baad6db051eb6a245f314619222_22_02_27_18_47_18/0?type=T&text=true

 

 



 Comments   
Comment by Githook User [ 08/Apr/22 ]

Author:

{'name': 'sergey.galtsev', 'email': 'sergey.galtsev@mongodb.com', 'username': 'brushless-glitch'}

Message: SERVER-64065 disable user_management_helpers on selinux
Branch: v5.3
https://github.com/mongodb/mongo/commit/a65ad556b00f746059340f783f0a0dcce93e6cc7

Comment by Sergey Galtsev (Inactive) [ 03/Mar/22 ]

In the interim, d11917e94f21ce95bf708d6a2757cff5553958ab must be backported to 5.2 and 5.3

Comment by Githook User [ 03/Mar/22 ]

Author:

{'name': 'sergey.galtsev', 'email': 'sergey.galtsev@mongodb.com', 'username': 'brushless-glitch'}

Message: SERVER-64065 disable user_management_helpers on selinux
Branch: master
https://github.com/mongodb/mongo/commit/d11917e94f21ce95bf708d6a2757cff5553958ab

Comment by Sergey Galtsev (Inactive) [ 02/Mar/22 ]

Another error user_management_helpers.js

[2022/03/02 22:40:22.181] Error: Each client connection may only be authenticated once. Previously authenticated as: super@admin

Comment by Sergey Galtsev (Inactive) [ 02/Mar/22 ]

Another error in profile3.js

[2022/03/02 18:42:43.788] Error: [0] != [3] are not equal :
[2022/03/02 18:42:43.788] doassert@src/mongo/shell/assert.js:20:14
[2022/03/02 18:42:43.788] assert.eq@src/mongo/shell/assert.js:179:9
[2022/03/02 18:42:43.788] @jstests/core/profile3.js:45:5
[2022/03/02 18:42:43.788] run@jstests/selinux/core.js:49:22
[2022/03/02 18:42:43.788] @(shell eval):7:9
[2022/03/02 18:42:43.788] Error: error loading js file: jstests/core/profile3.js :
[2022/03/02 18:42:43.788] run@jstests/selinux/core.js:49:22
[2022/03/02 18:42:43.788] @(shell eval):7:9
[2022/03/02 18:42:43.828] exiting with code -4
[2022/03/02 18:42:43.829] ==== FAIL: test returned result: 252

Comment by Sergey Galtsev (Inactive) [ 02/Mar/22 ]

Another error identified in profile1.js:

[2022/03/02 17:20:37.582] sh10579| jstests/core/profile1.js has tags: ['assumes_superuser_permissions', 'creates_and_authenticates_user', 'does_not_support_stepdowns', 'requires_capped', 'requires_collstats', 'requires_non_retryable_commands', 'requires_profiling']
[2022/03/02 17:20:37.631] [jsTest] ----
[2022/03/02 17:20:37.631] [jsTest] Running test: jstests/core/profile1.js
[2022/03/02 17:20:37.631] [jsTest] ----
[2022/03/02 17:20:37.631] Successfully added user: { "user" : "jstests_profile1_user", "roles" : [ "dbOwner" ] }
[2022/03/02 17:20:37.661] Error: Each client connection may only be authenticated once. Previously authenticated as: super@admin
[2022/03/02 17:20:37.679] Error: [2] != [0] are not equal : E2 -- {

 

Generated at Thu Feb 08 05:59:25 UTC 2024 using Jira 9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66.