So apparently, it's related to a node in our cluster. I can see these
errors in journalctl:
Mar 09 17:22:42 node-2 audit[4703]: <audit-1400> avc: denied { write }
for pid=4703 comm="java" name="data" dev="fuse" ino=9843468220720736682
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=dir permissive=1
Mar 09 17:22:47 node-2 audit[4857]: <audit-1400> avc: denied { add_name }
for pid=4857 comm="java" name="CommitLog-5-1457540567907.log"
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=dir permissive=1
Mar 09 17:22:47 node-2 audit[4857]: <audit-1400> avc: denied { create }
for pid=4857 comm="java" name="CommitLog-5-1457540567907.log"
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Mar 09 17:22:47 node-2 audit[4857]: <audit-1400> avc: denied { write }
for pid=4857 comm="java"
path="/cassandra_data/commitlog/CommitLog-5-1457540567907.log" dev="fuse"
ino=10956889784336742242
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Mar 09 17:22:49 node-2 audit[4703]: <audit-1400> avc: denied { create }
for pid=4703 comm="java" name="1457540569861-compactions_in_progress"
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=dir permissive=1
Mar 09 17:22:49 node-2 audit[4703]: <audit-1400> avc: denied { link } for
pid=4703 comm="java" name="la-9-big-Statistics.db" dev="fuse"
ino=10510076985085529148
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Mar 09 17:22:50 node-2 audit[4913]: <audit-1400> avc: denied {
remove_name } for pid=4913 comm="java" name="la-9-big-Data.db" dev="fuse"
ino=13130903719924797147
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=dir permissive=1
Mar 09 17:22:50 node-2 audit[4913]: <audit-1400> avc: denied { unlink }
for pid=4913 comm="java" name="la-9-big-Data.db" dev="fuse"
ino=13130903719924797147
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Mar 09 17:22:50 node-2 audit[4766]: <audit-1400> avc: denied { append }
for pid=4766 comm="java"
path="/cassandra_data/data/system/local-7ad54392bcdd35a684174e047860b377/tmp-la-3707-big-TOC.txt"
dev="fuse" ino=12790406562840461914
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Mar 09 17:22:50 node-2 audit[4766]: <audit-1400> avc: denied { rename }
for pid=4766 comm="java" name="tmp-la-3707-big-Statistics.db" dev="fuse"
ino=12795535630717990387
scontext=system_u:system_r:svirt_lxc_net_t:s0:c0,c5
tcontext=system_u:object_r:fusefs_t:s0 tclass=file permissive=1
Any idea how to fix this? It seem related to selinux, but I don't
understand why this node would have a different configuration than the
others...
_______________________________________________
users mailing list
[email protected]
http://lists.openshift.redhat.com/openshiftmm/listinfo/users
