PowerFlex: Linux SDCs With Selinux Set To Enforcing

Scenario

The SDC module fails to load when SELINUX=enforcing. 

Symptoms

The SDC module fails to load:

insmod: ERROR: could not insert module /bin/emc/scaleio/scini.ko: Permission denied

Impact

Linux SDC fails to load.

Root Cause

Selinux has not been configured to allow the SDC module to load.  

Workaround

configure selinux to allow the SDC module to load with the following steps:

Satisfy prerequisites by installing the selinux utils package policycoreutils-python:

# yum install python3-policycoreutils 

1. In any folder, create two files; scini.fe and scini.te.

scini.fe

/bin/emc/scaleio/(.*).ko system_u:object_r:modules_object_t:s0

scini.te

module scini 1.0;

require {
type insmod_t;
type modules_object_t;
class system module_load;
}

2. Build the selinux module:

Checkmodule -M -m scini.te -o scini.mod
semodule_package -o scini.pp -m scini.mod -f scini.fe

3. Install the selinux module: 

semodule -i scini.pp
restorecon -R -v /bin/emc/scaleio/

4. Reboot the node to load the scini module.

To revert this workaround, remove the selinux module:

semodule -r scini

Impacted Versions

All Linux SDCs