Scans are getting stuck in a "build pending" state and are unable to be accessed

[Shaji Markose]

We have noticed  Lots of scans are getting stuck in a "build pending" state and are unable to be accessed. Resource check shows XNAT server is hammered by setroubleshootd, means SELinux is detecting denials and daemon is trying to anlyse them. 

Audit log shows:

avc:  denied  { getattr } for  
pid=3065728 comm="taskScheduler-2"
path="/data/xnat/home/plugins/cnda-freesurfer-common-1.0.5.jar"
scontext=system_u:system_r:tomcat_t:s0
tcontext=unconfined_u:object_r:default_t:s0
tclass=file
permissive=1

Seems like a mislabeling issue. Any permanant solution appricated.

Thanks

Shaji Markose

[Rick Herrick]

Shaji,

Could you run this on your XNAT plugins folder?

ls -Z /data/xnat/home/plugins/*

Let me know what you find.

I'm not at all familiar with SELinux but I'm discussing this with our IT/devops person. This command should show the context of the other plugins in that folder so we can see if there's something different about that plugin or if it's just the one getting hit first.

Rick Herrick 

Senior Software Developer

ri...@xnatworks.io

https://xnatworks.io | Find us on LinkedIn! 

--
You received this message because you are subscribed to the Google Groups "xnat_discussion" group.
To unsubscribe from this group and stop receiving emails from it, send an email to xnat_discussi...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/xnat_discussion/5a13fedc-bc6d-413c-ab66-790d5af24f36n%40googlegroups.com.

[Shaji Markose]

Hi Rick,

It all looks the same. I think this is the one getting hit first. This is an issue with RHEL8

Thanks

Shaji

To view this discussion visit https://groups.google.com/d/msgid/xnat_discussion/CAFykhbC6aCfij%2BK%3DodNKhVeHHNWNMNPySWns3CbDc0HifOjgrQ%40mail.gmail.com.