I get 5xx HTTP error when accessing https://taskotron-dev.fedoraproject.org/resultsdb/results and this is written into journal on resultsdb-dev01:
Jan 05 12:07:54 resultsdb-dev01.qa.fedoraproject.org audit[8844]: AVC avc: denied { name_connect } for pid=8844 comm="httpd" dest=80 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1
After switching to permissive mode, everything works ok.
Metadata Update from @kparal: - Issue assigned to kparal
The reason is that httpd_can_network_connect seboolean is not set on dev.
httpd_can_network_connect
Fixed by https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=353a4867e5927d4aa2b3cfbfce153e25a068c019 and https://infrastructure.fedoraproject.org/cgit/ansible.git/commit/?id=dc771f332fc1d0c97ec540721c5b6229f2716c74 .
Metadata Update from @kparal: - Issue close_status updated to: Fixed - Issue status updated to: Closed (was: Open)
Log in to comment on this ticket.