Uploaded image for project: 'Percona XtraBackup'
  1. Percona XtraBackup
  2. PXB-2473

Selinux errors in audit logs

Details

    • Bug
    • Status: Done
    • Medium
    • Resolution: Fixed
    • 8.0.23-16 (Q1 2021)
    • 8.0.25-17 (Q2 2021)
    • None
    • None
    • Yes

    Description

      Prerequisites: Virtualbox and vagrant should be installed
      Create Vagrantfile

      Vagrant.configure("2") do |config|
       # All Vagrant configuration is done here. The most pxb configuration
       # options are documented and commented below. For a complete reference,
       # please see the online documentation at vagrantup.com.
       config.vm.define "centos8selinux" do |node|
       node.vm.box = "bento/centos-8"
       node.vm.hostname = "centos8selinux"
       node.vm.provider "virtualbox" do |vb|
       vb.customize ["modifyvm", :id, "--cpus", 2]
       vb.customize ["modifyvm", :id, "--memory", "2048", "--ioapic", "on"]
       end
       config.vm.synced_folder '.', '/vagrant', :disabled => true
       config.vm.synced_folder '.', '/home/vagrant/sync', :disabled => true
       end
      end

      Import epel gpg key, Percona key, Mysql key

      sudo rpm --import https://dl.fedoraproject.org/pub/epel/RPM-GPG-KEY-EPEL-8
      sudo rpm --import https://repo.percona.com/yum/RPM-GPG-KEY-Percona
      sudo yum install -y https://dl.fedoraproject.org/pub/epel/epel-release-latest-8.noarch.rpm
      sudo rpm --import http://repo.mysql.com/RPM-GPG-KEY-mysql
      sudo yum install -y https://dev.mysql.com/get/mysql80-community-release-el8-1.noarch.rpm
      sudo /usr/bin/dnf module disable mysql -y

      Install Mysql server 8.0.23

      sudo yum install -y mysql-community-server
      sudo systemctl start mysqld
      Reset temporary mysql password

      Install Sysbench, Percona Toolkit, PXB, Quicklz, Lz4

      sudo yum install -y https://repo.percona.com/yum/percona-release-latest.noarch.rpm
      sudo percona-release enable-only tools release
      sudo yum install -y percona-xtrabackup-80 percona-xtrabackup-test-80 percona-xtrabackup-80-debuginfo
      sudo yum -y install qpress sysbench lz4 percona-toolkit

      Create sysbench data

      sudo sysbench /usr/share/sysbench/oltp_insert.lua --mysql-user=root --mysql-password='U?fY)9s7|3gxUm' --table-size=1000 --tables=10 --mysql-db=test --mysql-user=root --threads=100 --db-driver=mysql prepare

      Setup selinux and load xtrabackup profile

      sudo yum install -y policycoreutils-python-utils
      wget https://raw.githubusercontent.com/percona/percona-xtrabackup/8.0/packaging/percona/selinx/xtrabackup.fc
      wget https://raw.githubusercontent.com/percona/percona-xtrabackup/8.0/packaging/percona/selinx/xtrabackup.te
      make -f /usr/share/selinux/devel/Makefile xtrabackup.pp
      sudo semodule -i xtrabackup.pp
      sudo restorecon -v /usr/bin/*

      Set selinux to enforcing

      sudo setenforce 1

      Take backup

      sudo xtrabackup --user=root --password='U?fY)9s7|3gxUm' --backup --target-dir=$HOME/dbbackup_PS8 --encrypt=AES256 --encrypt-key=mHU3Zs5sRcSB7zB/JP1BInPP5lgShKly --encrypt-threads=10 --encrypt-chunk-size=128K --compress --compress-threads=10 --stream=xbstream --parallel=10 > $HOME/dbbackup_PS8/fullbackup.xbstream 2>full_backup_$(date +"%d_%m_%Y")_log

      There are some errors displayed in the audit logs in /var/log/audit/audit.log. Audit logs are attached.
      Note that some errors are not displayed by sudo ausearch -x xtrabackup

      Attachments

        1. audit_log
          22 kB
        2. Audit_log_lz4
          116 kB

        Activity

          People

            kamil.holubicki Kamil Holubicki
            manish.chawla Manish Chawla
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved:

              Time Tracking

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Time Spent - 2 days, 1 hour, 36 minutes Remaining Estimate - 6 minutes
                6m
                Logged:
                Time Spent - 2 days, 1 hour, 36 minutes Remaining Estimate - 6 minutes
                2d 1h 36m

                Smart Checklist