Pulp processes getting "avc: denied { name_connect }" error
Issue
-
Getting the following error when synchronizing repository.
pulpcore-worker-X[xxxx]: Backing off download_wrapper(...) for 0.5s (aiohttp.client_exceptions.ClientOSError: [Errno 104] Connection reset by peer)
-
and found the following SElinux AVC errors in
/var/log/audit/audit.log
file.type=AVC msg=audit(xxxxxxxx): avc: denied { name_connect } for pid=xxxx comm="pulpcore-worker" dest=9090 scontext=system_u:system_r:pulpcore_t:s0 tcontext=system_u:object_r:websm_port_t:s0 tclass=tcp_socket permissive=0 type=AVC msg=audit(xxxxxxxx): avc: denied { name_connect } for pid=xxxx comm="gunicorn" dest=9090 scontext=system_u:system_r:pulpcore_server_t:s0 tcontext=system_u:object_r:websm_port_t:s0 tclass=tcp_socket permissive=0
Environment
- Red Hat Satellite 6.10 and above
Subscriber exclusive content
A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.