Comments

50 Comments

Also fixes Bug 2326834.

BZ#2316474 SELinux is preventing pool-libvirt-db from 'connectto' accesses on the unix_stream_socket /run/libvirt/libvirt-sock.
karma

rclone is installed as a required dependency, as expected.

BZ#2320191 rclone is no longer just recommended
karma

Backup and restore with local folder work as expected.

Fixes:

Bug 2321309 - SELinux is preventing /usr/lib/systemd/systemd-executor from 'add_name' accesses on the directory home.

karma

Prints from VM with USB redirection.

BZ#2316066 dbus activated apps including the welcome dialog suffer 30-45 sec delay and/or crash on Workstation Live image randomly
BZ#2310097 dnfdragora instantly crashes on launch in Fedora 41

dnfdragora starts from the command line and from the Xfce Applications menu, as expected.

See, however:

Bug 2312015 - dnfdragora-updater non responsive

BZ#2310097 dnfdragora instantly crashes on launch in Fedora 41
karma

Running fine on bare metal: ASUS PRIME H570M-PLUS with Intel Core i5-11600.

karma

Tested with reproducer in Bug 2254434, Comment 138.

BZ#2254434 SELinux is preventing chrome from using the 'execheap' accesses on a process.
karma

Tested with reproducer in Bug 2254434, Comment 138.

BZ#2254434 SELinux is preventing chrome from using the 'execheap' accesses on a process.

Fixes:

Bug 2254434 - SELinux is preventing chrome from using the 'execheap' accesses on a process.

BZ#2290482 No tty on serial console with selinux-policy-40.21-1.fc41 and later
BZ#2303074 SELinux is preventing lightdm-gtk-gre from read, write access on the chr_file udmabuf.

Fixes BZ#2298080:

Boot F40 VM with "console=ttyS0" on the kernel command-line.

In virt-manager VM window, select "View:Consoles:Serial 1" and login.

$ tty /dev/ttyS0

$ systemctl show --property UnitFileState serial-getty@ttyS0.service UnitFileState=enabled-runtime

BZ#2298080 SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service

@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).

Before I post negative karma, BZ#2298080 doesn't seem to be fixed.

After running:

$ sudo semodule -DB

And rebooting in an F40 VM with console=ttyS0 on the kernel command-line:

$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0 Jul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc: denied { read write } for pid=446 comm="systemd-getty-g" name="ttyS0" dev="devtmpfs" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0

@farribeiro : What version of shim-x64 do you have installed? See BZ#2020627.

Boots in a VM (qemu/libvirt/virt-manager) and on bare metal (x86_64) with secure boot enabled and with shim-x64-15.8-3.x86_64.

Expired certificate has been removed. See BZ#2020627.

BZ#2281457 local filesystem mounted but not unmounted after backup
BZ#2281457 local filesystem mounted but not unmounted after backup