{"updates": [{"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.12-1.fc41.\n\n##### **Changelog**\n\n```\n* Wed Jul 31 2024 Zdenek Pytela <zpytela@redhat.com> - 41.12-1\n- Update bootupd policy\n- Allow rhsmcertd read/write access to /dev/papr-sysparm\n- Label /dev/papr-sysparm and /dev/papr-vpd\n- Allow abrt-dump-journal-core connect to winbindd\n- Allow systemd-hostnamed shut down nscd\n- Allow systemd-pstore send a message to syslogd over a unix domain\n- Allow postfix_domain map postfix_etc_t files\n- Allow microcode create /sys/devices/system/cpu/microcode/reload\n- Allow rhsmcertd read, write, and map ica tmpfs files\n- Support SGX devices\n- Allow initrc_t transition to passwd_t\n- Update fstab and cryptsetup generators policy\n- Allow xdm_t read and write the dma device\n- Update stalld policy for bpf usage\n- Allow systemd_gpt_generator to getattr on DOS directories\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-31 20:14:13", "date_modified": null, "date_approved": "2024-07-31 22:30:29", "date_testing": "2024-07-31 20:16:20", "date_stable": "2024-07-31 22:30:29", "alias": "FEDORA-2024-119b2c24a1", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-31 22:30:29", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-119b2c24a1", "title": "selinux-policy-41.12-1.fc41", "version_hash": "3dfc461b8f44bb05f7cc5b2e86bde0ed3afab467", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-31 20:14:13", "update_id": 633141, "user_id": 91, "id": 3640543, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-31 20:14:15", "update_id": 633141, "user_id": 91, "id": 3640544, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-31 22:28:48", "update_id": 633141, "user_id": 91, "id": 3640666, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-31 22:30:30", "update_id": 633141, "user_id": 91, "id": 3640667, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.12-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-119b2c24a1", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.11-1.eln141.\n\n##### **Changelog**\n\n```\n* Thu Jul 25 2024 Zdenek Pytela <zpytela@redhat.com> - 41.11-1\n- Make cgroup_memory_pressure_t a part of the file_type attribute\n- Allow ssh_t to change role to system_r\n- Update policy for coreos generators\n- Allow init_t nnp domain transition to firewalld_t\n- Label /run/modprobe.d with modules_conf_t\n- Allow virtnodedevd run udev with a domain transition\n- Allow virtnodedev_t create and use virtnodedev_lock_t\n- Allow virtstoraged manage files with virt_content_t type\n- Allow virtqemud unmount a filesystem with extended attributes\n- Allow svirt_t connect to unconfined_t over a unix domain socket\n* Mon Jul 22 2024 Zdenek Pytela <zpytela@redhat.com> - 41.10-1\n- Update afterburn file transition policy\n- Allow systemd_generator read attributes of all filesystems\n- Allow fstab-generator read and write cryptsetup-generator unit file\n- Allow cryptsetup-generator read and write fstab-generator unit file\n- Allow systemd_generator map files in /etc\n- Allow systemd_generator read init's process state\n- Allow coreos-installer-generator read sssd public files\n- Allow coreos-installer-generator work with partitions\n- Label /etc/mdadm.conf.d with mdadm_conf_t\n- Confine coreos generators\n- Label /run/metadata with afterburn_runtime_t\n- Allow afterburn list ssh home directory\n- Label samba certificates with samba_cert_t\n- Label /run/coreos-installer-reboot with coreos_installer_var_run_t\n- Allow virtqemud read virt-dbus process state\n- Allow staff user dbus chat with virt-dbus\n- Allow staff use watch /run/systemd\n- Allow systemd_generator to write kmsg\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2024-07-25 23:26:59", "date_modified": null, "date_approved": "2024-07-25 23:30:27", "date_testing": "2024-07-25 23:28:58", "date_stable": "2024-07-25 23:30:27", "alias": "FEDORA-2024-eca21c6414", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2024-07-25 23:30:27", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-eca21c6414", "title": "selinux-policy-41.11-1.eln141", "version_hash": "64463341b37d80bc2b3c84404f02cc67fcd9da6d", "release": {"name": "ELN", "long_name": "Fedora ELN", "version": "eln", "id_prefix": "FEDORA", "branch": "eln", "dist_tag": "eln", "stable_tag": "eln", "testing_tag": "eln-updates-testing", "candidate_tag": "eln-updates-candidate", "pending_signing_tag": "eln-signing-pending", "pending_testing_tag": "eln-updates-testing-pending", "pending_stable_tag": "eln-updates-pending", "override_tag": "eln-override", "mail_template": "fedora_errata_template", "state": "pending", "composed_by_bodhi": false, "create_automatic_updates": true, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 0, "mandatory_days_in_testing": 0, "critpath_min_karma": 2, "min_karma": 1, "setting_status": "pre_beta"}, "user": {"name": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org", "email": null, "id": 6654, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org.id.fedoraproject.org", "groups": []}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-25 23:26:59", "update_id": 631873, "user_id": 91, "id": 3634082, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-25 23:28:58", "update_id": 631873, "user_id": 91, "id": 3634083, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-07-25 23:28:58", "update_id": 631873, "user_id": 91, "id": 3634084, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-25 23:30:28", "update_id": 631873, "user_id": 91, "id": 3634085, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.11-1.eln141", "signed": true, "release_id": 46, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-eca21c6414", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": true, "stable_karma": 5, "stable_days": 14, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New F40 selinux-policy build\n\n----\n\nNew F40 selinux-policy build", "type": "bugfix", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-25 21:53:58", "date_modified": null, "date_approved": "2024-07-29 07:31:25", "date_testing": "2024-07-26 01:58:06", "date_stable": "2024-07-30 01:31:57", "alias": "FEDORA-2024-f6d12d5c36", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-30 01:31:57", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-f6d12d5c36", "title": "selinux-policy-40.26-1.fc40", "version_hash": "513655351bce6749714e3977eb15b5f87a404c01", "release": {"name": "F40", "long_name": "Fedora 40", "version": "40", "id_prefix": "FEDORA", "branch": "f40", "dist_tag": "f40", "stable_tag": "f40-updates", "testing_tag": "f40-updates-testing", "candidate_tag": "f40-updates-candidate", "pending_signing_tag": "f40-signing-pending", "pending_testing_tag": "f40-updates-testing-pending", "pending_stable_tag": "f40-updates-pending", "override_tag": "f40-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-05-13", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by zpytela. ", "timestamp": "2024-07-25 21:53:58", "update_id": 631862, "user_id": 91, "id": 3634002, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-25 21:54:00", "update_id": 631862, "user_id": 91, "id": 3634003, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-25 21:54:00", "update_id": 631862, "user_id": 91, "id": 3634004, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-40.25-1.fc40](https://bodhi.fedoraproject.org/updates/FEDORA-2024-391cfa58c2), and has inherited its bugs and notes.", "timestamp": "2024-07-25 21:54:01", "update_id": 631862, "user_id": 91, "id": 3634006, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-25 23:21:52", "update_id": 631862, "user_id": 91, "id": 3634081, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2024-07-26 01:59:10", "update_id": 631862, "user_id": 91, "id": 3634228, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "bug_feedback": [{"karma": 0, "comment_id": 3634232, "bug_id": 2280010, "bug": {"bug_id": 2280010, "title": "SELinux is preventing qemu-system-x86 from 'connectto' accesses on the unix_stream_socket /home/username/.config/libvirt/qemu/lib/domain-3-win10-local/fs0-fs.sock.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2282974, "bug": {"bug_id": 2282974, "title": "SELinux is preventing virtiofsd from 'unmount' accesses on the filesystem .", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2293811, "bug": {"bug_id": 2293811, "title": "SELinux is preventing rpc-virtstorage from 'unlink' accesses on the file SLE-15-SP5-Online-x86_64-GM-Media1.iso.", "security": false, "parent": false}}, {"karma": 1, "comment_id": 3634232, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298948, "bug": {"bug_id": 2298948, "title": "SELinux is preventing systemd-modules from 'getattr' accesses on the soubor /run/modprobe.d/initramfsblacklist.conf.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works.", "timestamp": "2024-07-26 02:11:42", "update_id": 631862, "user_id": 198, "id": 3634281, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2024-07-26 02:12:30", "update_id": 631862, "user_id": 91, "id": 3634286, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "bug_feedback": [{"karma": 0, "comment_id": 3634384, "bug_id": 2280010, "bug": {"bug_id": 2280010, "title": "SELinux is preventing qemu-system-x86 from 'connectto' accesses on the unix_stream_socket /home/username/.config/libvirt/qemu/lib/domain-3-win10-local/fs0-fs.sock.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2282974, "bug": {"bug_id": 2282974, "title": "SELinux is preventing virtiofsd from 'unmount' accesses on the filesystem .", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2293811, "bug": {"bug_id": 2293811, "title": "SELinux is preventing rpc-virtstorage from 'unlink' accesses on the file SLE-15-SP5-Online-x86_64-GM-Media1.iso.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298948, "bug": {"bug_id": 2298948, "title": "SELinux is preventing systemd-modules from 'getattr' accesses on the soubor /run/modprobe.d/initramfsblacklist.conf.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-27 00:55:49", "update_id": 631862, "user_id": 5881, "id": 3635431, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no new regressions found. Electron apps still continue to randomly crash and generate thousands of violations, though.", "timestamp": "2024-07-29 07:31:25", "update_id": 631862, "user_id": 411, "id": 3636877, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "common-issues-triage"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2024-07-29 07:31:25", "update_id": 631862, "user_id": 91, "id": 3636878, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2024-07-30 01:33:05", "update_id": 631862, "user_id": 91, "id": 3637997, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-40.26-1.fc40", "signed": true, "release_id": 76, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2280010, "title": "SELinux is preventing qemu-system-x86 from 'connectto' accesses on the unix_stream_socket /home/username/.config/libvirt/qemu/lib/domain-3-win10-local/fs0-fs.sock.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3634232, "bug_id": 2280010, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2280010, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2282974, "title": "SELinux is preventing virtiofsd from 'unmount' accesses on the filesystem .", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3634232, "bug_id": 2282974, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2282974, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2293811, "title": "SELinux is preventing rpc-virtstorage from 'unlink' accesses on the file SLE-15-SP5-Online-x86_64-GM-Media1.iso.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3634232, "bug_id": 2293811, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2293811, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298080, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 1, "comment_id": 3634232, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298663, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298844, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298948, "title": "SELinux is preventing systemd-modules from 'getattr' accesses on the soubor /run/modprobe.d/initramfsblacklist.conf.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3634232, "bug_id": 2298948, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298948, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2299014, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}], "updateid": "FEDORA-2024-f6d12d5c36", "karma": 5, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.11-1.fc41.\n\n##### **Changelog**\n\n```\n* Thu Jul 25 2024 Zdenek Pytela <zpytela@redhat.com> - 41.11-1\n- Make cgroup_memory_pressure_t a part of the file_type attribute\n- Allow ssh_t to change role to system_r\n- Update policy for coreos generators\n- Allow init_t nnp domain transition to firewalld_t\n- Label /run/modprobe.d with modules_conf_t\n- Allow virtnodedevd run udev with a domain transition\n- Allow virtnodedev_t create and use virtnodedev_lock_t\n- Allow virtstoraged manage files with virt_content_t type\n- Allow virtqemud unmount a filesystem with extended attributes\n- Allow svirt_t connect to unconfined_t over a unix domain socket\n* Mon Jul 22 2024 Zdenek Pytela <zpytela@redhat.com> - 41.10-1\n- Update afterburn file transition policy\n- Allow systemd_generator read attributes of all filesystems\n- Allow fstab-generator read and write cryptsetup-generator unit file\n- Allow cryptsetup-generator read and write fstab-generator unit file\n- Allow systemd_generator map files in /etc\n- Allow systemd_generator read init's process state\n- Allow coreos-installer-generator read sssd public files\n- Allow coreos-installer-generator work with partitions\n- Label /etc/mdadm.conf.d with mdadm_conf_t\n- Confine coreos generators\n- Label /run/metadata with afterburn_runtime_t\n- Allow afterburn list ssh home directory\n- Label samba certificates with samba_cert_t\n- Label /run/coreos-installer-reboot with coreos_installer_var_run_t\n- Allow virtqemud read virt-dbus process state\n- Allow staff user dbus chat with virt-dbus\n- Allow staff use watch /run/systemd\n- Allow systemd_generator to write kmsg\n\n```\n\n----\n\nAutomatic update for selinux-policy-41.10-1.fc41.\n", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-25 21:13:36", "date_modified": null, "date_approved": "2024-07-25 23:00:28", "date_testing": "2024-07-25 21:15:41", "date_stable": "2024-07-25 23:00:28", "alias": "FEDORA-2024-fa03406b81", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-25 23:00:28", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-fa03406b81", "title": "selinux-policy-41.11-1.fc41", "version_hash": "7471fd35286ecf2fab6103ee02f44ee184a79930", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-25 21:13:36", "update_id": 631848, "user_id": 91, "id": 3633944, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-41.10-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-aa10dc94fe), and has inherited its bugs and notes.", "timestamp": "2024-07-25 21:13:36", "update_id": 631848, "user_id": 91, "id": 3633946, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-25 21:13:39", "update_id": 631848, "user_id": 91, "id": 3633947, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-25 22:57:43", "update_id": 631848, "user_id": 91, "id": 3634061, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-25 23:00:28", "update_id": 631848, "user_id": 91, "id": 3634062, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.11-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-fa03406b81", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.9-2.eln141.\n\n##### **Changelog**\n\n```\n* Sat Jul 20 2024 Fedora Release Engineering <releng@fedoraproject.org> - 41.9-2\n- Rebuilt for https://fedoraproject.org/wiki/Fedora_41_Mass_Rebuild\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2024-07-24 15:37:51", "date_modified": null, "date_approved": "2024-07-24 15:45:40", "date_testing": "2024-07-24 15:43:36", "date_stable": "2024-07-24 15:45:40", "alias": "FEDORA-2024-72c49aecb3", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2024-07-24 15:45:40", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-72c49aecb3", "title": "selinux-policy-41.9-2.eln141", "version_hash": "873f59f1a7232c32a348f1c5134eadd8ac54fdd7", "release": {"name": "ELN", "long_name": "Fedora ELN", "version": "eln", "id_prefix": "FEDORA", "branch": "eln", "dist_tag": "eln", "stable_tag": "eln", "testing_tag": "eln-updates-testing", "candidate_tag": "eln-updates-candidate", "pending_signing_tag": "eln-signing-pending", "pending_testing_tag": "eln-updates-testing-pending", "pending_stable_tag": "eln-updates-pending", "override_tag": "eln-override", "mail_template": "fedora_errata_template", "state": "pending", "composed_by_bodhi": false, "create_automatic_updates": true, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 0, "mandatory_days_in_testing": 0, "critpath_min_karma": 2, "min_karma": 1, "setting_status": "pre_beta"}, "user": {"name": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org", "email": null, "id": 6654, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org.id.fedoraproject.org", "groups": []}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-24 15:37:51", "update_id": 631318, "user_id": 91, "id": 3631396, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-24 15:43:36", "update_id": 631318, "user_id": 91, "id": 3631764, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-07-24 15:43:36", "update_id": 631318, "user_id": 91, "id": 3631765, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-24 15:45:41", "update_id": 631318, "user_id": 91, "id": 3631848, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.9-2.eln141", "signed": true, "release_id": 46, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-72c49aecb3", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": false, "stable_karma": 5, "stable_days": 14, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New F40 selinux-policy build", "type": "bugfix", "status": "obsolete", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-23 14:44:00", "date_modified": null, "date_approved": null, "date_testing": "2024-07-24 03:50:52", "date_stable": null, "alias": "FEDORA-2024-391cfa58c2", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-24 03:50:52", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-391cfa58c2", "title": "selinux-policy-40.25-1.fc40", "version_hash": "bd02b55d3df66b9624c33f54e00ce0e5ef6b4d2d", "release": {"name": "F40", "long_name": "Fedora 40", "version": "40", "id_prefix": "FEDORA", "branch": "f40", "dist_tag": "f40", "stable_tag": "f40-updates", "testing_tag": "f40-updates-testing", "candidate_tag": "f40-updates-candidate", "pending_signing_tag": "f40-signing-pending", "pending_testing_tag": "f40-updates-testing-pending", "pending_stable_tag": "f40-updates-pending", "override_tag": "f40-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-05-13", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by zpytela. ", "timestamp": "2024-07-23 14:44:00", "update_id": 628804, "user_id": 91, "id": 3618921, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-23 14:44:02", "update_id": 628804, "user_id": 91, "id": 3618922, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-23 14:44:02", "update_id": 628804, "user_id": 91, "id": 3618923, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "bug_feedback": [{"karma": 0, "comment_id": 3619246, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-23 22:00:23", "update_id": 628804, "user_id": 91, "id": 3619323, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "bug_feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3627569, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3627569, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3627569, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2024-07-24 03:52:04", "update_id": 628804, "user_id": 91, "id": 3628639, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works.", "timestamp": "2024-07-24 06:48:05", "update_id": 628804, "user_id": 198, "id": 3630819, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2024-07-24 06:48:27", "update_id": 628804, "user_id": 91, "id": 3630820, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "bug_feedback": [{"karma": 0, "comment_id": 3632838, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "bug_feedback": [{"karma": 0, "comment_id": 3632884, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-24 21:00:13", "update_id": 628804, "user_id": 5881, "id": 3633104, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}, {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "bug_feedback": [{"karma": 0, "comment_id": 3633563, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 91, "id": 3633564, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "bug_feedback": [{"karma": 0, "comment_id": 3633657, "bug_id": 2298080, "bug": {"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298663, "bug": {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298844, "bug": {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2299014, "bug": {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-40.26-1.fc40](https://bodhi.fedoraproject.org/updates/FEDORA-2024-f6d12d5c36).", "timestamp": "2024-07-25 21:54:00", "update_id": 628804, "user_id": 91, "id": 3634005, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "no regressions noted but I'm voting 0 due other users comments", "timestamp": "2024-07-25 22:06:54", "update_id": 628804, "user_id": 124, "id": 3634033, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "trust admins"}, {"name": "signed_fpca"}, {"name": "fedora-contributor"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "ipausers"}, {"name": "fedora-br"}, {"name": "fedorabugs"}, {"name": "ambassadors"}]}}], "builds": [{"nvr": "selinux-policy-40.25-1.fc40", "signed": true, "release_id": 76, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2298080, "title": "SELinux policy prevents systemd-getty-generator from enabling serial-getty@ttyS0.service", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298080, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 1, "comment_id": 3634232, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298080, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298080, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298663, "title": "SELinux is preventing systemd-coredum from 'read' accesses on the file labeled nsfs_t.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298663, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298663, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298663, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2298844, "title": "SELinux is preventing systemd-cryptse from read, write, open access on the file /run/systemd/generator/dev-mapper-luks\\x2d8f513d23\\x2d9730\\x2d4bfd\\x2db813\\x2dda5455b029fa.device.d/.#40-device-timeout.conff6799cfd5a438c63.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2298844, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2298844, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2298844, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2299014, "title": "I think this happened during a dnf upgrade: SELinux is preventing systemd-fstab-g from read, write access on the Datei /run/systemd/generator/dev-mapper-luks\\x2d476affaa\\x2de7db\\x2d4f60\\x2dab09\\x2d42ba968a1757.device.d/.#50-device-timeout.confe7be011a1c2", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3627569, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "Before I post negative karma, BZ#2298080 doesn't seem to be fixed.\n\nAfter running:\n\n$ sudo semodule -DB\n\nAnd rebooting in an F40 VM with console=ttyS0 on the kernel command-line:\n\n$ journalctl --no-hostname -b | fgrep -i avc | fgrep ttyS0\nJul 23 20:05:46 kernel: audit: type=1400 audit(1721790346.277:8): avc:  denied  { read write } for  pid=446 comm=\"systemd-getty-g\" name=\"ttyS0\" dev=\"devtmpfs\" ino=92 scontext=system_u:system_r:systemd_getty_generator_t:s0 tcontext=system_u:object_r:tty_device_t:s0 tclass=chr_file permissive=0\n\n\n", "timestamp": "2024-07-24 03:25:35", "update_id": 628804, "user_id": 2554, "id": 3627569, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3632838, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "@stephent98 I accidentally ommited one commit when backporting, so it's fixed in rawhide only, F40 will follow soon. Please use negative karma wisely.", "timestamp": "2024-07-24 18:43:00", "update_id": 628804, "user_id": 5290, "id": 3632838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3632884, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela Thanks for your clarification. Auto-generation of serial-getty_@_ttyS0.service works as expected in F41 with selinux-policy-41.9-1.fc41 (BZ#2290482, Comment 68).\n", "timestamp": "2024-07-24 20:11:24", "update_id": 628804, "user_id": 2554, "id": 3632884, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3633563, "bug_id": 2299014, "comment": {"karma": -1, "karma_critpath": 0, "text": "cockpit-machine's nightly run against updates-testing https://github.com/cockpit-project/cockpit-machines/issues/1739 picked up this update and causes a regression with migration. Apparently libvirt cannot run ssh any more:\n\naudit: SELINUX_ERR op=security_compute_sid invalid_context=\"system_u:system_r:ssh_t:s0\" scontext=system_u:system_r:virtqemud_t:s0 tcontext=system_u:object_r:ssh_exec_t:s0 tclass=process\nvirtqemud[1036]: Cannot recv data: libvirt:  error : cannot execute binary ssh: Permission denied: Connection reset by peer\n", "timestamp": "2024-07-25 05:49:04", "update_id": 628804, "user_id": 3506, "id": 3633563, "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}}, {"karma": 0, "comment_id": 3634232, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes BZ#2298080:\n\nBoot F40 VM with \"console=ttyS0\" on the kernel command-line.\n\nIn virt-manager VM window, select \"View:Consoles:Serial 1\" and login.\n\n$ tty\n/dev/ttyS0\n\n$ systemctl show --property UnitFileState serial-getty@ttyS0.service\nUnitFileState=enabled-runtime\n", "timestamp": "2024-07-26 02:00:16", "update_id": 631862, "user_id": 2554, "id": 3634232, "testcase_feedback": [], "user": {"name": "stephent98", "email": "stephent98@hotmail.com", "id": 2554, "avatar": "https://seccdn.libravatar.org/avatar/11fb72ad29b3da29384a3fd4c531ea9dcb0103788c300f6ece693de13da427d0?s=24&d=retro", "openid": "stephent98.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3619246, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-23 19:32:36", "update_id": 628804, "user_id": 449, "id": 3619246, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3633657, "bug_id": 2299014, "comment": {"karma": 0, "karma_critpath": 0, "text": "IMO it's technically not a regression as using ssh by virtqemud was not allowed in the previous build. Anyway fix is on the way, a new build will be available today.", "timestamp": "2024-07-25 11:09:16", "update_id": 628804, "user_id": 5290, "id": 3633657, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3634384, "bug_id": 2299014, "comment": {"karma": 1, "karma_critpath": 0, "text": "Looks OK here.", "timestamp": "2024-07-26 05:27:01", "update_id": 631862, "user_id": 4756, "id": 3634384, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}], "updateid": "FEDORA-2024-391cfa58c2", "karma": 3, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.10-1.fc41.\n\n##### **Changelog**\n\n```\n* Mon Jul 22 2024 Zdenek Pytela <zpytela@redhat.com> - 41.10-1\n- Update afterburn file transition policy\n- Allow systemd_generator read attributes of all filesystems\n- Allow fstab-generator read and write cryptsetup-generator unit file\n- Allow cryptsetup-generator read and write fstab-generator unit file\n- Allow systemd_generator map files in /etc\n- Allow systemd_generator read init's process state\n- Allow coreos-installer-generator read sssd public files\n- Allow coreos-installer-generator work with partitions\n- Label /etc/mdadm.conf.d with mdadm_conf_t\n- Confine coreos generators\n- Label /run/metadata with afterburn_runtime_t\n- Allow afterburn list ssh home directory\n- Label samba certificates with samba_cert_t\n- Label /run/coreos-installer-reboot with coreos_installer_var_run_t\n- Allow virtqemud read virt-dbus process state\n- Allow staff user dbus chat with virt-dbus\n- Allow staff use watch /run/systemd\n- Allow systemd_generator to write kmsg\n\n```", "type": "unspecified", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-22 20:32:07", "date_modified": null, "date_approved": null, "date_testing": "2024-07-22 20:34:17", "date_stable": null, "alias": "FEDORA-2024-aa10dc94fe", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-22 20:34:17", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-aa10dc94fe", "title": "selinux-policy-41.10-1.fc41", "version_hash": "6251a621b8fad85530ef18bd8ba8ce29f72c811b", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-22 20:32:07", "update_id": 628651, "user_id": 91, "id": 3617996, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-22 20:32:10", "update_id": 628651, "user_id": 91, "id": 3617997, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-22 20:53:47", "update_id": 628651, "user_id": 91, "id": 3618012, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "Is there any way to retract this update quickly? This breaks so much, it's rather unbearable.. \n\nBy the timing and symptoms, I'm also quite sure this is what breaks the stratis tests (like https://github.com/stratis-storage/stratisd/pull/3642 and a handful of others):\n```\n+ systemctl start firewalld\n+ firewall-cmd --add-service=cockpit --permanent\nError: [Errno 13] Permission denied: '/etc/firewalld/zones/public.xml'\n```", "timestamp": "2024-07-23 04:29:02", "update_id": 628651, "user_id": 3506, "id": 3618422, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@martinpitt which firewalld version do you have? I have firewalld-2.1.2-3.fc41.noarch and the service starts properly", "timestamp": "2024-07-23 07:14:11", "update_id": 628651, "user_id": 5290, "id": 3618504, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "That's hard to say unfortunately, the TF log doesn't print them anywhere: https://artifacts.dev.testing-farm.io/eceffdf6-95df-4eec-a623-a1aaca405ac7/ (presumably because it's not installed, but is part of the base image). \n\nBut I suspect it may actually be the unpushed 2.2.0-1.fc41  from https://bodhi.fedoraproject.org/updates/FEDORA-2024-3766dd8914 , that mentioned the same problem.\n\nHowever, even if that is a firewalld problem, the \"automated tests\" here has 24 failures, including your own (functional): https://artifacts.dev.testing-farm.io/93dcde52-a95e-460f-881f-9f2fcfad0507/", "timestamp": "2024-07-23 08:21:32", "update_id": 628651, "user_id": 3506, "id": 3618524, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "martinpitt", "email": "mpitt@redhat.com", "id": 3506, "avatar": "https://seccdn.libravatar.org/avatar/a6a00790fadaca10623f4464437e482d4ec110fe331397506ea9fe2664bec740?s=24&d=retro", "openid": "martinpitt.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "cockpitteam"}, {"name": "ocp-cico-cockpit"}]}}, {"karma": 0, "karma_critpath": 0, "text": "firewalld 2.2.0 was untagged from Rawhide today because it was broken, perhaps the issue is related to that", "timestamp": "2024-07-23 08:24:34", "update_id": 628651, "user_id": 411, "id": 3618548, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "common-issues-triage"}]}}, {"karma": 0, "karma_critpath": 0, "text": "I'm in the process of restarting update.* tests, there was another problem in shadow-utils", "timestamp": "2024-07-23 08:27:58", "update_id": 628651, "user_id": 411, "id": 3618570, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "kparal", "email": "kparal@redhat.com", "id": 411, "avatar": "https://seccdn.libravatar.org/avatar/5da027c64997c654044c3d0fdefea4cde1b5cea73f8ecfca77af48e2ba5ed772?s=24&d=retro", "openid": "kparal.id.fedoraproject.org", "groups": [{"name": "qa-tools-sig"}, {"name": "proventesters"}, {"name": "qa"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "qa-admin"}, {"name": "common-issues-triage"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-23 08:37:10", "update_id": 628651, "user_id": 91, "id": 3618583, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "@kparal, if it was because of adding NoNewPrivileges, that's easy to detect and fix https://github.com/fedora-selinux/selinux-policy/pull/2254\n", "timestamp": "2024-07-23 08:39:38", "update_id": 628651, "user_id": 5290, "id": 3618585, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Certainly I reviewed our tests results before merging the distgit PR, all are known issues and no new problem was found", "timestamp": "2024-07-23 08:48:43", "update_id": 628651, "user_id": 5290, "id": 3618595, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-23 10:06:23", "update_id": 628651, "user_id": 91, "id": 3618683, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-41.11-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-fa03406b81).", "timestamp": "2024-07-25 21:13:36", "update_id": 628651, "user_id": 91, "id": 3633945, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.10-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-aa10dc94fe", "karma": -1, "content_type": "rpm", "test_cases": []}, {"autokarma": true, "autotime": true, "stable_karma": 5, "stable_days": 14, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New F40 selinux-policy build", "type": "bugfix", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-17 16:15:17", "date_modified": null, "date_approved": "2024-07-18 09:27:22", "date_testing": "2024-07-18 04:58:21", "date_stable": "2024-07-19 01:45:23", "alias": "FEDORA-2024-f30b2bffdc", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-19 01:45:23", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-f30b2bffdc", "title": "selinux-policy-40.24-1.fc40", "version_hash": "1dbcd117b0e897a17f5c0c2a11b55e9b0463fe34", "release": {"name": "F40", "long_name": "Fedora 40", "version": "40", "id_prefix": "FEDORA", "branch": "f40", "dist_tag": "f40", "stable_tag": "f40-updates", "testing_tag": "f40-updates-testing", "candidate_tag": "f40-updates-candidate", "pending_signing_tag": "f40-signing-pending", "pending_testing_tag": "f40-updates-testing-pending", "pending_stable_tag": "f40-updates-pending", "override_tag": "f40-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-05-13", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by zpytela. ", "timestamp": "2024-07-17 16:15:18", "update_id": 627934, "user_id": 91, "id": 3614107, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-17 16:15:19", "update_id": 627934, "user_id": 91, "id": 3614108, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-17 16:15:20", "update_id": 627934, "user_id": 91, "id": 3614109, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "bug_feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2255775, "bug": {"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2276917, "bug": {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2291296, "bug": {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2292191, "bug": {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2292253, "bug": {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2292627, "bug": {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2293467, "bug": {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2295175, "bug": {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-17 17:41:47", "update_id": 627934, "user_id": 91, "id": 3614148, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "bug_feedback": [{"karma": 0, "comment_id": 3614178, "bug_id": 2255775, "bug": {"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2276917, "bug": {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2291296, "bug": {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292191, "bug": {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292253, "bug": {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292627, "bug": {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2293467, "bug": {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2295175, "bug": {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "bug_feedback": [{"karma": 0, "comment_id": 3614181, "bug_id": 2255775, "bug": {"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2276917, "bug": {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2291296, "bug": {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292191, "bug": {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292253, "bug": {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292627, "bug": {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2293467, "bug": {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2295175, "bug": {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2024-07-18 04:59:47", "update_id": 627934, "user_id": 91, "id": 3614640, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2024-07-18 05:00:27", "update_id": 627934, "user_id": 91, "id": 3614658, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Works.", "timestamp": "2024-07-18 07:24:33", "update_id": 627934, "user_id": 198, "id": 3614701, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "bug_feedback": [{"karma": 0, "comment_id": 3614747, "bug_id": 2255775, "bug": {"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2276917, "bug": {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2291296, "bug": {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false}}, {"karma": -1, "comment_id": 3614747, "bug_id": 2292191, "bug": {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2292253, "bug": {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2292627, "bug": {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2293467, "bug": {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2295175, "bug": {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 91, "id": 3614748, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "bug_feedback": [{"karma": 0, "comment_id": 3615344, "bug_id": 2255775, "bug": {"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2276917, "bug": {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2291296, "bug": {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292191, "bug": {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292253, "bug": {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292627, "bug": {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2293467, "bug": {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2295175, "bug": {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2024-07-19 01:46:26", "update_id": 627934, "user_id": 91, "id": 3615370, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-40.24-1.fc40", "signed": true, "release_id": 76, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2255775, "title": "SELinux is preventing smtpd from getattr access on the file /etc/my.cnf", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614181, "bug_id": 2255775, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2255775, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2255775, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2255775, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2255775, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2276917, "title": "SELinux denial for /etc/libvirt/hooks/network", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614181, "bug_id": 2276917, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2276917, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2276917, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2276917, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2276917, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2291296, "title": "wireshark segfaults when run by staff_u - fixable with booleans - perhaps policy can be modified?", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614181, "bug_id": 2291296, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614118, "bug_id": 2291296, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2291296, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2291296, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2291296, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2292191, "title": "40.22-1.fc40 breaks cryptsetup action on startup: related denial logged during boot since update to 40.22-1 -> related device no longer mounted on boot", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2292191, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292191, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292191, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": -1, "comment_id": 3614747, "bug_id": 2292191, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292191, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2292253, "title": "SELinux is preventing zram-generator from 'create' accesses on the lnk_file var-lib-mock.mount.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2292253, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292253, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292253, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2292253, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292253, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2292627, "title": "SELinux is preventing systemd-cryptse from 'search' accesses on the directory dev-mapper-luks\\x2d41cf8d65\\x2daf41\\x2d4e50\\x2db651\\x2dd73a2ce3abea.device.d.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2292627, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2292627, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2292627, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2292627, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2292627, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2293467, "title": "SELinux is preventing systemd-fstab-g from 'create' accesses on the file .#50-device-timeout.confa518dc821a64d188.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2293467, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2293467, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2293467, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2293467, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2293467, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 2295175, "title": "SELinux is preventing abrt-dump-journ from 'getattr' accesses on the sock_file /run/samba/winbindd/pipe.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3614118, "bug_id": 2295175, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 16:57:20", "update_id": 627934, "user_id": 2935, "id": 3614118, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 3614178, "bug_id": 2295175, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-07-17 19:03:54", "update_id": 627934, "user_id": 6126, "id": 3614178, "testcase_feedback": [], "user": {"name": "spirtovich", "email": "andrey@razve.net", "id": 6126, "avatar": "https://seccdn.libravatar.org/avatar/48b309661aa1ebd614c8ed4712d4090ae150ce1530066dd29b681ed8a258b5fa?s=24&d=retro", "openid": "spirtovich.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 3614181, "bug_id": 2295175, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-07-17 19:26:41", "update_id": 627934, "user_id": 449, "id": 3614181, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 3614747, "bug_id": 2295175, "comment": {"karma": 1, "karma_critpath": 0, "text": "Does generally work, but it does not solve my BZ#2292191. The issue is unchanged.", "timestamp": "2024-07-18 09:27:22", "update_id": 627934, "user_id": 7249, "id": 3614747, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3615344, "bug_id": 2295175, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems OK so far.", "timestamp": "2024-07-19 01:25:02", "update_id": 627934, "user_id": 4756, "id": 3615344, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}], "updateid": "FEDORA-2024-f30b2bffdc", "karma": 6, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.9-1.eln141.\n\n##### **Changelog**\n\n```\n* Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 41.9-1\n- Allow virtqemud connect to sanlock over a unix stream socket\n- Allow virtqemud relabel virt_var_run_t directories\n- Allow svirt_tcg_t read vm sysctls\n- Allow virtnodedevd connect to systemd-userdbd over a unix socket\n- Allow svirt read virtqemud fifo files\n- Allow svirt attach_queue to a virtqemud tun_socket\n- Allow virtqemud run ssh client with a transition\n- Allow virt_dbus_t connect to virtqemud_t over a unix stream socket\n- Update keyutils policy\n- Allow sshd_keygen_t connect to userdbd over a unix stream socket\n- Allow postfix-smtpd read mysql config files\n- Allow locate stream connect to systemd-userdbd\n- Allow the staff user use wireshark\n- Allow updatedb connect to userdbd over a unix stream socket\n- Allow gpg_t set attributes of public-keys.d\n- Allow gpg_t get attributes of login_userdomain stream\n- Allow systemd_getty_generator_t read /proc/1/environ\n- Allow systemd_getty_generator_t to read and write to tty_device_t\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2024-07-16 12:52:44", "date_modified": null, "date_approved": "2024-07-16 12:57:24", "date_testing": "2024-07-16 12:54:41", "date_stable": "2024-07-16 12:57:24", "alias": "FEDORA-2024-04f8c23cc9", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2024-07-16 12:57:24", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-04f8c23cc9", "title": "selinux-policy-41.9-1.eln141", "version_hash": "f6875577e5e82d7a0eb5e888687504539adbea16", "release": {"name": "ELN", "long_name": "Fedora ELN", "version": "eln", "id_prefix": "FEDORA", "branch": "eln", "dist_tag": "eln", "stable_tag": "eln", "testing_tag": "eln-updates-testing", "candidate_tag": "eln-updates-candidate", "pending_signing_tag": "eln-signing-pending", "pending_testing_tag": "eln-updates-testing-pending", "pending_stable_tag": "eln-updates-pending", "override_tag": "eln-override", "mail_template": "fedora_errata_template", "state": "pending", "composed_by_bodhi": false, "create_automatic_updates": true, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 0, "mandatory_days_in_testing": 0, "critpath_min_karma": 2, "min_karma": 1, "setting_status": "pre_beta"}, "user": {"name": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org", "email": null, "id": 6654, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org.id.fedoraproject.org", "groups": []}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-16 12:52:44", "update_id": 627673, "user_id": 91, "id": 3612821, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-16 12:54:41", "update_id": 627673, "user_id": 91, "id": 3612826, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-07-16 12:54:41", "update_id": 627673, "user_id": 91, "id": 3612827, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-16 12:57:25", "update_id": 627673, "user_id": 91, "id": 3612831, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.9-1.eln141", "signed": true, "release_id": 46, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-04f8c23cc9", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.9-1.fc41.\n\n##### **Changelog**\n\n```\n* Tue Jul 16 2024 Zdenek Pytela <zpytela@redhat.com> - 41.9-1\n- Allow virtqemud connect to sanlock over a unix stream socket\n- Allow virtqemud relabel virt_var_run_t directories\n- Allow svirt_tcg_t read vm sysctls\n- Allow virtnodedevd connect to systemd-userdbd over a unix socket\n- Allow svirt read virtqemud fifo files\n- Allow svirt attach_queue to a virtqemud tun_socket\n- Allow virtqemud run ssh client with a transition\n- Allow virt_dbus_t connect to virtqemud_t over a unix stream socket\n- Update keyutils policy\n- Allow sshd_keygen_t connect to userdbd over a unix stream socket\n- Allow postfix-smtpd read mysql config files\n- Allow locate stream connect to systemd-userdbd\n- Allow the staff user use wireshark\n- Allow updatedb connect to userdbd over a unix stream socket\n- Allow gpg_t set attributes of public-keys.d\n- Allow gpg_t get attributes of login_userdomain stream\n- Allow systemd_getty_generator_t read /proc/1/environ\n- Allow systemd_getty_generator_t to read and write to tty_device_t\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-16 10:39:26", "date_modified": null, "date_approved": "2024-07-16 12:27:25", "date_testing": "2024-07-16 10:41:15", "date_stable": "2024-07-16 12:27:25", "alias": "FEDORA-2024-3510bbb1bb", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-16 12:27:25", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-3510bbb1bb", "title": "selinux-policy-41.9-1.fc41", "version_hash": "c3f12c479010f1f0cf09c1c4c940fb8f84f3939a", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-16 10:39:26", "update_id": 627629, "user_id": 91, "id": 3612645, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-16 10:39:28", "update_id": 627629, "user_id": 91, "id": 3612646, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-16 12:26:59", "update_id": 627629, "user_id": 91, "id": 3612770, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-16 12:27:25", "update_id": 627629, "user_id": 91, "id": 3612771, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.9-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-3510bbb1bb", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.8-4.eln141.\n\n##### **Changelog**\n\n```\n* Fri Jul 12 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-11\n- Move %postInstall to %posttrans\n* Fri Jul 12 2024 Colin Walters <walters@verbum.org> - 41.8-9\n- Use `Requires(meta): (rpm-plugin-selinux if rpm-libs)`\n* Fri Jul 12 2024 Ondrej Mosnacek <omosnace@redhat.com> - 41.8-8\n- Drop obsolete modules from config\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-6\n- Also relabel files under /usr/sbin\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-5\n- Manually bump Release\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-4\n- Relabel files under /usr/bin to fix stale context after sbin merge\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-2\n- Drop the publicfile module\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1\n- Drop publicfile module\n- Remove permissive domain for systemd_nsresourced_t\n- Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t\n- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t\n- Allow to create and delete socket files created by rhsm.service\n- Allow virtnetworkd exec shell when virt_hooks_unconfined is on\n- Allow unconfined_service_t transition to passwd_t\n- Support /var is empty\n- Allow abrt-dump-journal read all non_security socket files\n- Allow timemaster write to sysfs files\n- Dontaudit domain write cgroup files\n- Label /usr/lib/node_modules/npm/bin with bin_t\n- Allow ip the setexec permission\n- Allow systemd-networkd write files in /var/lib/systemd/network\n- Fix typo in systemd_nsresourced_prog_run_bpf()\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2024-07-12 16:17:35", "date_modified": null, "date_approved": "2024-07-12 16:24:24", "date_testing": "2024-07-12 16:21:39", "date_stable": "2024-07-12 16:24:24", "alias": "FEDORA-2024-802100a2ec", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2024-07-12 16:24:24", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-802100a2ec", "title": "selinux-policy-41.8-4.eln141", "version_hash": "82147811e23e43a79291ed97a02e20d2cc153c6c", "release": {"name": "ELN", "long_name": "Fedora ELN", "version": "eln", "id_prefix": "FEDORA", "branch": "eln", "dist_tag": "eln", "stable_tag": "eln", "testing_tag": "eln-updates-testing", "candidate_tag": "eln-updates-candidate", "pending_signing_tag": "eln-signing-pending", "pending_testing_tag": "eln-updates-testing-pending", "pending_stable_tag": "eln-updates-pending", "override_tag": "eln-override", "mail_template": "fedora_errata_template", "state": "pending", "composed_by_bodhi": false, "create_automatic_updates": true, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 0, "mandatory_days_in_testing": 0, "critpath_min_karma": 2, "min_karma": 1, "setting_status": "pre_beta"}, "user": {"name": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org", "email": null, "id": 6654, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org.id.fedoraproject.org", "groups": []}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-12 16:17:35", "update_id": 626996, "user_id": 91, "id": 3608923, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-12 16:21:39", "update_id": 626996, "user_id": 91, "id": 3608947, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-07-12 16:21:40", "update_id": 626996, "user_id": 91, "id": 3608948, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-12 16:24:24", "update_id": 626996, "user_id": 91, "id": 3608952, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.8-4.eln141", "signed": true, "release_id": 46, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-802100a2ec", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.8-4.fc41.\n\n##### **Changelog**\n\n```\n* Fri Jul 12 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-11\n- Move %postInstall to %posttrans\n* Fri Jul 12 2024 Colin Walters <walters@verbum.org> - 41.8-9\n- Use `Requires(meta): (rpm-plugin-selinux if rpm-libs)`\n* Fri Jul 12 2024 Ondrej Mosnacek <omosnace@redhat.com> - 41.8-8\n- Drop obsolete modules from config\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-6\n- Also relabel files under /usr/sbin\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-5\n- Manually bump Release\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-4\n- Relabel files under /usr/bin to fix stale context after sbin merge\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-2\n- Drop the publicfile module\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1\n- Drop publicfile module\n- Remove permissive domain for systemd_nsresourced_t\n- Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t\n- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t\n- Allow to create and delete socket files created by rhsm.service\n- Allow virtnetworkd exec shell when virt_hooks_unconfined is on\n- Allow unconfined_service_t transition to passwd_t\n- Support /var is empty\n- Allow abrt-dump-journal read all non_security socket files\n- Allow timemaster write to sysfs files\n- Dontaudit domain write cgroup files\n- Label /usr/lib/node_modules/npm/bin with bin_t\n- Allow ip the setexec permission\n- Allow systemd-networkd write files in /var/lib/systemd/network\n- Fix typo in systemd_nsresourced_prog_run_bpf()\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```\n\n----\n\nAutomatic update for selinux-policy-41.8-3.fc41.\n\n\n----\n\nAutomatic update for selinux-policy-41.8-2.fc41.\n", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-12 10:54:37", "date_modified": null, "date_approved": "2024-07-12 14:27:23", "date_testing": "2024-07-12 10:56:46", "date_stable": "2024-07-12 14:27:23", "alias": "FEDORA-2024-5025a99508", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-12 14:27:23", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-5025a99508", "title": "selinux-policy-41.8-4.fc41", "version_hash": "20ce0176e6f3e8dae2e1c30c20d58b7555d76222", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-12 10:54:37", "update_id": 626928, "user_id": 91, "id": 3608642, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-41.8-3.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-6102638fbb), and has inherited its bugs and notes.", "timestamp": "2024-07-12 10:54:39", "update_id": 626928, "user_id": 91, "id": 3608644, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-12 10:54:42", "update_id": 626928, "user_id": 91, "id": 3608645, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-12 11:43:01", "update_id": 626928, "user_id": 91, "id": 3608697, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "update.upgrade_realmd_client: Test died: command 'nmcli con up 'Wired connection 1'' failed at fedora/tests/_post_network_static.pm line 12.\n\nJul 12 07:42:46 client003.test.openqa.fedoraproject.org NetworkManager[842]: <warn>  [1720784566.9980] device (enp0s3): IP address 172.16.2.103 cannot be configured because it is already in use in the network by host 52:54:00:12:00:54\n\nOK, this does not seem to be related to the policy stuff.", "timestamp": "2024-07-12 13:34:33", "update_id": 626928, "user_id": 119, "id": 3608772, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "_graphical_wait_login fails in a few places with \"softfail\" on geolocation.", "timestamp": "2024-07-12 13:38:27", "update_id": 626928, "user_id": 119, "id": 3608773, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "OK, so we have the known installability failures, one test which failed with a network issue, one test that was cancelled, and a few tests which are \"softfail\" on geolocation. I'll waive the failures.", "timestamp": "2024-07-12 13:39:55", "update_id": 626928, "user_id": 119, "id": 3608774, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-12 13:41:02", "update_id": 626928, "user_id": 91, "id": 3608775, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-12 13:41:02", "update_id": 626928, "user_id": 91, "id": 3608776, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-12 13:41:02", "update_id": 626928, "user_id": 91, "id": 3608777, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-12 14:25:38", "update_id": 626928, "user_id": 91, "id": 3608796, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-12 14:27:23", "update_id": 626928, "user_id": 91, "id": 3608798, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "softfail is treated as a pass. It's more of a 'warn' than a 'soft fail' and that's what we call it in resultsdb, but I can't change what openQA calls it upstream.\n\nPlease don't waive `update.upgrade_realmd_client` when we know that test cluster has failed for real before; either trigger a re-run or wait for me to do so.\n\nin general, please be less gung ho with waivers! You already caused one mess this week with a premature waiver that took me half a day to clean up, and now you decided to just go ahead and do another? let's *hope* that test passes on the rerun, or else I have another mess to clean up, thanks. waivers are not normal procedure. you are only supposed to waive failures you are *100% sure* can be waived safely.", "timestamp": "2024-07-12 15:50:30", "update_id": 626928, "user_id": 302, "id": 3608860, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}], "builds": [{"nvr": "selinux-policy-41.8-4.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-5025a99508", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.8-3.fc41.\n\n##### **Changelog**\n\n```\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-6\n- Also relabel files under /usr/sbin\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-5\n- Manually bump Release\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-4\n- Relabel files under /usr/bin to fix stale context after sbin merge\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-2\n- Drop the publicfile module\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1\n- Drop publicfile module\n- Remove permissive domain for systemd_nsresourced_t\n- Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t\n- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t\n- Allow to create and delete socket files created by rhsm.service\n- Allow virtnetworkd exec shell when virt_hooks_unconfined is on\n- Allow unconfined_service_t transition to passwd_t\n- Support /var is empty\n- Allow abrt-dump-journal read all non_security socket files\n- Allow timemaster write to sysfs files\n- Dontaudit domain write cgroup files\n- Label /usr/lib/node_modules/npm/bin with bin_t\n- Allow ip the setexec permission\n- Allow systemd-networkd write files in /var/lib/systemd/network\n- Fix typo in systemd_nsresourced_prog_run_bpf()\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```\n\n----\n\nAutomatic update for selinux-policy-41.8-2.fc41.\n", "type": "unspecified", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-11 14:05:03", "date_modified": null, "date_approved": null, "date_testing": "2024-07-11 14:06:56", "date_stable": null, "alias": "FEDORA-2024-6102638fbb", "test_gating_status": "failed", "from_tag": null, "date_pushed": "2024-07-11 14:06:56", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-6102638fbb", "title": "selinux-policy-41.8-3.fc41", "version_hash": "165cd10b85ac72db950d974b77f0c32d4c333e07", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-11 14:05:03", "update_id": 626718, "user_id": 91, "id": 3607468, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-41.8-2.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-1daf053916), and has inherited its bugs and notes.", "timestamp": "2024-07-11 14:05:04", "update_id": 626718, "user_id": 91, "id": 3607470, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-11 14:05:06", "update_id": 626718, "user_id": 91, "id": 3607471, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-11 14:48:28", "update_id": 626718, "user_id": 91, "id": 3607533, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "Looks to be failing [the exact same way as 41.8-2.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-1daf053916#comment-3607608). Log extract from the straight Fedora 41 FreeIPA install test:\n\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org systemd[1]: Starting httpd.service - The Apache HTTP Server...\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org audit[9946]: AVC avc:  denied  { execute } for  pid=9946 comm=\"(httpd)\" name=\"httpd\" dev=\"dm-0\" ino=8548399 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon=\"system_u:object_r:publicfile_exec_t:s0\"\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org (httpd)[9946]: httpd.service: Unable to locate executable '/usr/sbin/httpd': Permission denied\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org audit[9946]: SYSCALL arch=c000003e syscall=21 success=no exit=-13 a0=7ffff11c27f0 a1=1 a2=0 a3=0 items=0 ppid=1 pid=9946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"(httpd)\" exe=\"/usr/lib/systemd/systemd-executor\" subj=system_u:system_r:init_t:s0 key=(null)\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=\"(httpd)\"\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org (httpd)[9946]: httpd.service: Failed at step EXEC spawning /usr/sbin/httpd: Permission denied\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Main process exited, code=exited, status=203/EXEC\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Failed with result 'exit-code'.\n    Jul 11 07:51:47 ipa001.test.openqa.fedoraproject.org systemd[1]: Failed to start httpd.service - The Apache HTTP Server.", "timestamp": "2024-07-11 16:09:34", "update_id": 626718, "user_id": 302, "id": 3607624, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Yes, it's very similar to previous failures. But I think the details of the AVCs are different. This one seems to be related to systemd-executor. ", "timestamp": "2024-07-11 18:20:28", "update_id": 626718, "user_id": 119, "id": 3607747, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-41.8-4.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-5025a99508).", "timestamp": "2024-07-12 10:54:38", "update_id": 626718, "user_id": 91, "id": 3608643, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.8-3.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-6102638fbb", "karma": -1, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.8-2.fc41.\n\n##### **Changelog**\n\n```\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-5\n- Manually bump Release\n* Thu Jul 11 2024 Zbigniew J\u0119drzejewski-Szmek <zbyszek@in.waw.pl> - 41.8-4\n- Relabel files under /usr/bin to fix stale context after sbin merge\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-2\n- Drop the publicfile module\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1\n- Drop publicfile module\n- Remove permissive domain for systemd_nsresourced_t\n- Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t\n- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t\n- Allow to create and delete socket files created by rhsm.service\n- Allow virtnetworkd exec shell when virt_hooks_unconfined is on\n- Allow unconfined_service_t transition to passwd_t\n- Support /var is empty\n- Allow abrt-dump-journal read all non_security socket files\n- Allow timemaster write to sysfs files\n- Dontaudit domain write cgroup files\n- Label /usr/lib/node_modules/npm/bin with bin_t\n- Allow ip the setexec permission\n- Allow systemd-networkd write files in /var/lib/systemd/network\n- Fix typo in systemd_nsresourced_prog_run_bpf()\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```", "type": "unspecified", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-11 13:32:50", "date_modified": null, "date_approved": null, "date_testing": "2024-07-11 13:34:48", "date_stable": null, "alias": "FEDORA-2024-1daf053916", "test_gating_status": "failed", "from_tag": null, "date_pushed": "2024-07-11 13:34:48", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-1daf053916", "title": "selinux-policy-41.8-2.fc41", "version_hash": "1315cd5b33165acae814e75e5447393a360accce", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-11 13:32:50", "update_id": 626711, "user_id": 91, "id": 3607440, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-11 13:32:52", "update_id": 626711, "user_id": 91, "id": 3607441, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-41.8-3.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-6102638fbb).", "timestamp": "2024-07-11 14:05:04", "update_id": 626711, "user_id": 91, "id": 3607469, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-11 14:15:37", "update_id": 626711, "user_id": 91, "id": 3607493, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "This still failed on SELinux denials on FreeIPA tests.\n\nIn the straight Fedora 41 tests like [this one](https://openqa.fedoraproject.org/tests/2725262), this is what happens:\n\n* Boot a pre-existing Fedora Rawhide base disk image which has selinux-policy-41.3-1.fc41 (the current Rawhide version), no FreeIPA or httpd packages installed yet\n* Update the whole system, including updating to selinux-policy-41.8-2.fc41 (the version in this update)\n* Reboot\n* Attempt to deploy the system as a FreeIPA server using `ipa-server-install`, which causes httpd to be installed and started\n\nWhen the IPA install process tries to start httpd, it fails because of an SELinux denial, and so the test fails:\n```\n    Jul 11 14:12:30 ipa002.test.openqa.fedoraproject.org systemd[1]: Starting httpd.service - The Apache HTTP Server...\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org audit[10243]: AVC avc:  denied  { execute } for  pid=10243 comm=\"(httpd)\" name=\"httpd\" dev=\"dm-0\" ino=8568055 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon=\"system_u:object_r:publicfile_exec_t:s0\"\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org (httpd)[10243]: httpd.service: Unable to locate executable '/usr/sbin/httpd': Permission denied\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org audit[10243]: SYSCALL arch=c000003e syscall=21 success=no exit=-13 a0=7ffe66a94f10 a1=1 a2=0 a3=0 items=0 ppid=1 pid=10243 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"(httpd)\" exe=\"/usr/lib/systemd/systemd-executor\" subj=system_u:system_r:init_t:s0 key=(null)\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=\"(httpd)\"\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org (httpd)[10243]: httpd.service: Failed at step EXEC spawning /usr/sbin/httpd: Permission denied\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org systemd[1]: httpd.service: Main process exited, code=exited, status=203/EXEC\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org systemd[1]: httpd.service: Failed with result 'exit-code'.\n    Jul 11 14:12:32 ipa002.test.openqa.fedoraproject.org systemd[1]: Failed to start httpd.service - The Apache HTTP Server.\n```\nIn [the Fedora 40 to 41 upgrade test](https://openqa.fedoraproject.org/tests/2725336), this is what happens:\n\n* Boot a pre-existing Fedora 40 base disk image which has selinux-policy-40.23-1.fc40 (the current Fedora 40 version), no FreeIPA or httpd packages installed yet\n* Deploy the system as a FreeIPA server using `ipa-server-install`, which causes httpd to be installed and started\n* Verify that this worked and the system is functioning fine as a FreeIPA server\n* Upgrade the whole system to Fedora 41, including upgrading **DIRECTLY** to selinux-policy-41.8-2.fc41 (the version in this update)\n* Reboot\n* Check that the system is still working as a FreeIPA server and ipa.service is running\n\nThis check fails because `ipa.service` is not running, and so the test fails. This is because httpd failed to start:\n```\nJul 11 14:51:49 ipa001.test.openqa.fedoraproject.org systemd[1]: Starting httpd.service - The Apache HTTP Server...\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[2245]: ipa: INFO: KDC proxy enabled\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[2245]: ipa-httpd-kdcproxy: INFO     KDC proxy enabled\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org (httpd)[2249]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org audit[2249]: AVC avc:  denied  { create } for  pid=2249 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=netlink_route_socket permissive=0\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org httpd[2249]: httpd: Could not open configuration file /etc/httpd/conf/httpd.conf: Permission denied\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org audit[2249]: AVC avc:  denied  { create } for  pid=2249 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org audit[2249]: AVC avc:  denied  { create } for  pid=2249 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org audit[2249]: AVC avc:  denied  { search } for  pid=2249 comm=\"httpd\" name=\"httpd\" dev=\"dm-0\" ino=13713984 scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:object_r:httpd_config_t:s0 tclass=dir permissive=0\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Failed with result 'exit-code'.\nJul 11 14:51:50 ipa001.test.openqa.fedoraproject.org systemd[1]: Failed to start httpd.service - The Apache HTTP Server.\n```\nOne thing I guess I should emphasize here: the bin/sbin merge *has not landed* because it also failed a lot of openQA tests, so it is gated. That means it *is not involved* in testing of this update. No packages from the bin/sbin merge are installed during the testing of this update.", "timestamp": "2024-07-11 16:02:38", "update_id": 626711, "user_id": 302, "id": 3607608, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "I'll try to repeat the same result locally.\n\n1. Download https://dl.fedoraproject.org/pub/fedora/linux/development/rawhide/Server/x86_64/images/Fedora-Server-KVM-Rawhide-20240711.n.0.x86_64.qcow2\n2. Run that under virt-manager. (I got the default BIOS mode, but I don't think this matters.)\n3. rpm -q selinux-policy \u2192 selinux-policy-41.3-1.fc41.noarch\n4. sudo dnf upgrade https://kojipkgs.fedoraproject.org//packages/selinux-policy/41.8/3.fc41/noarch/selinux-policy{,-targeted}-41.8-3.fc41.noarch.rpm\n   sudo dnf upgrade \u2192 nothing\n5. sudo semanage fcontext -l|grep publicfile \u2192 nothing\n6. sudo reboot\n7. sudo dnf install /usr/sbin/ipa-server-install --setopt=install_weak_deps=0 -y\n8. ls -Z /usr/sbin/httpd \u2192 system_u:object_r:httpd_exec_t:s0\n\n9. sudo dnf -y group install freeipa-server\n10. sudo hostnamectl set-hostname tmp.openqa.fedoraproject.org\n11. sudo ipa-server-install -U --auto-forwarders --realm=TEST.OPENQA.FEDORAPROJECT.ORG --domain=test.openqa.fedoraproject.org --ds-password=monkeys123 --admin-password=monkeys123 --setup-dns --reverse-zone=2.16.172.in-addr.arpa --allow-zone-overlap\n\nThis finishes successfully. httpd.service is active.\n\nSo this seems all very straightforward. The test must be doing something strange to end up with the totally unexpected selinux context.", "timestamp": "2024-07-12 08:46:03", "update_id": 626711, "user_id": 119, "id": 3608535, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "One thing I notice is that I see systemd-256.2-2.fc41 in my image, and 'systemd 256.1-8.fc41' in the logs from the failed CI run. But systemd-256.2-2.fc41 bodhi update went stable 2024-07-09 11:50:24 UTC.\n\n---\n\n\"One thing I guess I should emphasize here: the bin/sbin merge has not landed because it also failed a lot of openQA tests, so it is gated. That means it is not involved in testing of this update. No packages from the bin/sbin merge are installed during the testing of this update.\"\n\nTrue. But we have the conundrum that `publicfile_t` is somehow activated in this update. This update includes the selinux-policy merge of sbin: /usr/sbin is an alias to /usr/bin.\n\n---\n\nAnyway, let's hope that https://src.fedoraproject.org/rpms/selinux-policy/pull-request/447 fixes the issue.", "timestamp": "2024-07-12 09:36:33", "update_id": 626711, "user_id": 119, "id": 3608581, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "What happend:\n\n- publicfile module defined selinux file context for /usr/bin/httpd which is different from the standard policy type for /usr/sbin/httpd\n- as part  of sbin merge feature, selinux-policy started to ship `/usr/sbin = /usr/bin` equivalency -> /usr/sbin/httpd is translated to /usr/bin/httpd and after that selinux context is resolved to publicfile..._t\n- selinux-policy dropped publicfile module so that ^^ should not happen\n- BUT during update, selinux-policy rebuild was done in %post phase when publicfile module from the old policy is still installed\n\nAfter these steps, current built and loaded policy would resolve /usr/sbin/httpd to publicfile..._t even though selinux policy store was already updated to the new version so any subsequent run of`semodule -B` fixed it.\n\nIt means that this bug was temporary and would be fixed with update from 41.8-1 (it it wasn't untagged) to anything new, or with `semodule -B` after update.\n\n", "timestamp": "2024-07-12 10:31:41", "update_id": 626711, "user_id": 732, "id": 3608615, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "plautrba", "email": "plautrba@redhat.com", "id": 732, "avatar": "https://seccdn.libravatar.org/avatar/ab14665f655df3516006caa5c129e935d06d7746ff6ce330e68a44b52647cf7a?s=24&d=retro", "openid": "plautrba.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "hgsetroubleshoot"}, {"name": "gitsce-community-content"}, {"name": "gitopenscap"}, {"name": "gitsetroubleshoot"}]}}], "builds": [{"nvr": "selinux-policy-41.8-2.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-1daf053916", "karma": -1, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.8-1.fc41.\n\n##### **Changelog**\n\n```\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-2\n- Drop the publicfile module\n* Wed Jul 10 2024 Zdenek Pytela <zpytela@redhat.com> - 41.8-1\n- Drop publicfile module\n- Remove permissive domain for systemd_nsresourced_t\n- Change fs_dontaudit_write_cgroup_files() to apply to cgroup_t\n- Label /usr/bin/samba-gpupdate with samba_gpupdate_exec_t\n- Allow to create and delete socket files created by rhsm.service\n- Allow virtnetworkd exec shell when virt_hooks_unconfined is on\n- Allow unconfined_service_t transition to passwd_t\n- Support /var is empty\n- Allow abrt-dump-journal read all non_security socket files\n- Allow timemaster write to sysfs files\n- Dontaudit domain write cgroup files\n- Label /usr/lib/node_modules/npm/bin with bin_t\n- Allow ip the setexec permission\n- Allow systemd-networkd write files in /var/lib/systemd/network\n- Fix typo in systemd_nsresourced_prog_run_bpf()\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```\n\n----\n\nAutomatic update for selinux-policy-41.7-1.fc41.\n\n\n----\n\nAutomatic update for selinux-policy-41.6-1.fc41.\n", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-07-10 11:32:33", "date_modified": null, "date_approved": "2024-07-10 13:35:26", "date_testing": "2024-07-10 11:36:07", "date_stable": "2024-07-10 13:35:26", "alias": "FEDORA-2024-2711625691", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-07-10 13:35:26", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-2711625691", "title": "selinux-policy-41.8-1.fc41", "version_hash": "b1d772b9088247f2042bc96470dee4b2e0b95957", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-07-10 11:32:33", "update_id": 626486, "user_id": 91, "id": 3606098, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-41.7-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-64134f8805), and has inherited its bugs and notes.", "timestamp": "2024-07-10 11:32:34", "update_id": 626486, "user_id": 91, "id": 3606100, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-10 11:32:35", "update_id": 626486, "user_id": 91, "id": 3606101, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "```\nERROR: selinux-policy is on the pipeline ignore list, skipping...\nFinished: ABORTED\n```\nReally?\n", "timestamp": "2024-07-10 12:55:15", "update_id": 626486, "user_id": 119, "id": 3606177, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "`/selinux-policy/fapolicyd-and-similar` is a false positive as discussed earlier.", "timestamp": "2024-07-10 12:55:49", "update_id": 626486, "user_id": 119, "id": 3606178, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-10 13:12:50", "update_id": 626486, "user_id": 91, "id": 3606186, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "The failure is a false positive:\n```\nJul 10 15:07:44 ipa001.test.openqa.fedoraproject.org systemd[1]: Starting httpd.service - The Apache HTTP Server...\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[26784]: ipa: INFO: KDC proxy enabled\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[26784]: ipa-httpd-kdcproxy: INFO     KDC proxy enabled\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org (httpd)[26788]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: AVC avc:  denied  { create } for  pid=26788 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=netlink_route_socket permissive=0\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: SYSCALL arch=c000003e syscall=41 success=no exit=-13 a0=10 a1=80003 a2=0 a3=7fffaedaae10 items=0 ppid=1 pid=26788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"httpd\" exe=\"/usr/sbin/httpd\" subj=system_u:system_r:publicfile_t:s0 key=(null)\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org httpd[26788]: httpd: Could not open configuration file /etc/httpd/conf/httpd.conf: Permission denied\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: AVC avc:  denied  { create } for  pid=26788 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: SYSCALL arch=c000003e syscall=41 success=no exit=-13 a0=a a1=80002 a2=0 a3=0 items=0 ppid=1 pid=26788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"httpd\" exe=\"/usr/sbin/httpd\" subj=system_u:system_r:publicfile_t:s0 key=(null)\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: AVC avc:  denied  { create } for  pid=26788 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: SYSCALL arch=c000003e syscall=41 success=no exit=-13 a0=2 a1=80002 a2=0 a3=0 items=0 ppid=1 pid=26788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"httpd\" exe=\"/usr/sbin/httpd\" subj=system_u:system_r:publicfile_t:s0 key=(null)\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: AVC avc:  denied  { search } for  pid=26788 comm=\"httpd\" name=\"httpd\" dev=\"dm-0\" ino=678848 scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:object_r:httpd_config_t:s0 tclass=dir permissive=0\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit[26788]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=5652d28d7860 a2=80000 a3=0 items=0 ppid=1 pid=26788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm=\"httpd\" exe=\"/usr/sbin/httpd\" subj=system_u:system_r:publicfile_t:s0 key=(null)\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org audit: PROCTITLE proctitle=2F7573722F7362696E2F6874747064002D44464F524547524F554E44\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Failed with result 'exit-code'.\nJul 10 15:07:45 ipa001.test.openqa.fedoraproject.org systemd[1]: Failed to start httpd.service - The Apache HTTP Server.\n```\n\nThis is because the system is created with the previous version of the policy and the upgraded package is installed into it, but no relabel is done. We'd need the relabel to happen for the test to pass. We should push this package and then the subsequent tests will pass after it goes stable.\n\nI installed the updated package and `/usr/sbin/httpd` has the correct context (`system_u:object_r:httpd_exec_t:s0`) after a relabel.\n", "timestamp": "2024-07-10 13:34:08", "update_id": 626486, "user_id": 119, "id": 3606194, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-10 13:35:07", "update_id": 626486, "user_id": 91, "id": 3606195, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-07-10 13:35:07", "update_id": 626486, "user_id": 91, "id": 3606196, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-07-10 13:35:30", "update_id": 626486, "user_id": 91, "id": 3606197, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "The openQA test does the following:\n\n* Boot a pre-built Fedora 40 Server disk image\n* Update it and install dnf system upgrade plugin\n* Reboot\n* Deploy the system as a FreeIPA server\n* Upgrade the system to Fedora Rawhide (41)\n* Log in\n* Check that FreeIPA is running (this is the check that fails)\n\nI do not understand where in that process you think the \"false positive\" is, @zbyszek . If a relabel is needed at some point during that process, it should not be openQA's (i.e. the sysadmin's) job to do it, it should be triggered by whatever update requires it.\n\nAs things stand I don't agree that this is a false positive, and indeed, now you waived this, subsequent updates are failing the same test in the same way, including https://bodhi.fedoraproject.org/updates/FEDORA-2024-3aafcac6a8 which you were trying to unblock: https://openqa.fedoraproject.org/tests/2722892", "timestamp": "2024-07-10 15:25:28", "update_id": 626486, "user_id": 302, "id": 3606282, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "The issue that causes the failure is the mislabelling caused by previous versions of selinux-policy. The problem was introduced recently (41.4-1), so to avoid the problem generally all that is needed is to skip the updates between that version and the latest update. Thus, I pushed the update with the hope that that'd actually resolve the issue once the latest update goes stable.\n\n>  If a relabel is needed at some point during that process, it should not be openQA's (i.e. the sysadmin's) job to do it, it should be triggered by whatever update requires it.\n\nI don't think it's job of the update either. If my analysis is correct, the issue should be resolved by not installing the bad selinux-policy versions.\n\n> subsequent updates are failing the same test in the same way, including FEDORA-2024-3aafcac6a8 which you were trying to unblock: https://openqa.fedoraproject.org/tests/2722892\n\nHmm, https://openqa.fedoraproject.org/tests/2722892 failed because pciutils was rebuilt again outside of the side-tag and became FTI. So I don't think the latest failure is related to selinux at all.", "timestamp": "2024-07-10 16:04:19", "update_id": 626486, "user_id": 119, "id": 3606386, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Pfff, I put the text above with quotes to which I was replying\u2026  It doesn't make sense without them. Please read my reply in the email notification in case it's not clear ;]", "timestamp": "2024-07-10 16:06:23", "update_id": 626486, "user_id": 119, "id": 3606390, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "\"Hmm, https://openqa.fedoraproject.org/tests/2722892 failed because pciutils was rebuilt again outside of the side-tag and became FTI. So I don't think the latest failure is related to selinux at all.\"\n\nHuh? No it didn't. It failed exactly the same way as this: ipa.service is failed because httpd service is failed, and httpd service is failed because \"httpd: Could not open configuration file /etc/httpd/conf/httpd.conf: Permission denied\". See https://openqa.fedoraproject.org/tests/2722892/file/role_deploy_domain_controller_check-var_log.tar.gz .\n\n\"The issue that causes the failure is the mislabelling caused by previous versions of selinux-policy. The problem was introduced recently (41.4-1), so to avoid the problem generally all that is needed is to skip the updates between that version and the latest update. Thus, I pushed the update with the hope that that'd actually resolve the issue once the latest update goes stable.\"\n\nLooking at the logs from 2722892 , the only selinux policy versions that ever seem to be installed during the lifetime of that test are `selinux-policy-targeted-40.23-1.fc40.noarch` (installed OOTB on the base F40 disk image) and `selinux-policy-targeted-41.8-1.fc41.noarch` (installed during the upgrade). No intermediate version ever appears to be installed. 40.23-1.fc40 is the current stable version for F40 - https://bodhi.fedoraproject.org/updates/FEDORA-2024-2bc43119f3 - and passed all its tests.", "timestamp": "2024-07-10 16:45:02", "update_id": 626486, "user_id": 302, "id": 3606422, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "It appears httpd is upgraded before selinux-policy:\n```\n[adamw@xps13a tmp]$ egrep \"Upgraded: (httpd-2.*|selinux-policy-targeted)\" var/log/dnf.log\n2024-07-10T11:02:14-0400 DEBUG Upgraded: httpd-2.4.61-2.fc41.x86_64\n2024-07-10T11:02:14-0400 DEBUG Upgraded: selinux-policy-targeted-41.8-1.fc41.noarch\n```\nCould this be the source of the issue?", "timestamp": "2024-07-10 16:53:57", "update_id": 626486, "user_id": 302, "id": 3606429, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Oh, no, that upgrade only happens in the test of FEDORA-2024-3aafcac6a8 , the bin-sbin merge update. In the logs of the test on this update, httpd is *down*graded, and it happens after selinux-policy is upgraded:\n```\n[adamw@xps13a tmp]$ egrep \".*graded: (httpd|selinux-policy-targeted)\" /tmp/var/log/dnf.log\n2024-07-10T09:08:08-0400 DEBUG Upgraded: selinux-policy-targeted-41.8-1.fc41.noarch\n2024-07-10T09:08:08-0400 DEBUG Downgraded: httpd-2.4.59-2.fc41.x86_64\n2024-07-10T09:08:08-0400 DEBUG Downgraded: httpd-core-2.4.59-2.fc41.x86_64\n2024-07-10T09:08:08-0400 DEBUG Downgraded: httpd-filesystem-2.4.59-2.fc41.noarch\n2024-07-10T09:08:08-0400 DEBUG Downgraded: httpd-tools-2.4.59-2.fc41.x86_64\n```", "timestamp": "2024-07-10 17:01:54", "update_id": 626486, "user_id": 302, "id": 3606439, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Aha. I did a scratch build of selinux-policy for F40 with [\"Drop the publicfile module\"](https://src.fedoraproject.org/rpms/selinux-policy/c/1e6c28bba2e75d73f1fe735e0bf97eed2e230277?branch=rawhide) backported, ran the test again with that scratch build pulled in, and [it seems to be passing](https://openqa.stg.fedoraproject.org/tests/4024956#live). So I think perhaps we need that change on F39 and F40 too, and that should have happened before this landed.\n\nI'm going to file a ticket requesting this update be untagged for now while we work this out, I don't want to try YOLOing selinux-policy builds for F39 and F40 myself.", "timestamp": "2024-07-10 18:19:43", "update_id": 626486, "user_id": 302, "id": 3606475, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Untag ticket: https://pagure.io/releng/issue/12197", "timestamp": "2024-07-10 18:24:05", "update_id": 626486, "user_id": 302, "id": 3606476, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Hmm, further note: I've now noticed that in the time this was stable, several F41 FreeIPA deployment tests (non-upgrade ones) failed due to failure to start httpd, e.g. [this one](https://openqa.fedoraproject.org/tests/2723514). In the logs we see a denial:\n```\ntype=AVC msg=audit(1720634659.820:1916): avc:  denied  { execute } for  pid=9853 comm=\"(httpd)\" name=\"httpd\" dev=\"dm-0\" ino=8535579 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon=\"system_u:object_r:publicfile_exec_t:s0\"\n```\nand a corresponding httpd.service failure:\n```\nJul 10 11:04:19 ipa002.test.openqa.fedoraproject.org (httpd)[9853]: httpd.service: Unable to locate executable '/usr/sbin/httpd': Permission denied\nJul 10 11:04:19 ipa002.test.openqa.fedoraproject.org (httpd)[9853]: httpd.service: Failed at step EXEC spawning /usr/sbin/httpd: Permission denied\n```\nFrom the logs it seems selinux-policy started out as 41.3 and was updated to 41.8 during the initial update run at the start of the test, before FreeIPA server deployment is attempted. I don't know why we didn't see these failures on the tests of the selinux 41.8 update itself.", "timestamp": "2024-07-10 23:45:45", "update_id": 626486, "user_id": 302, "id": 3606692, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "I don't quite understand the updates testing workflow, but in general, the issue with publicfile_t can only manifest when httpd starts with selinux-policy 41.3 to 41.7 installed.\n\ntcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon=\"system_u:object_r:publicfile_exec_t:s0\"\n\nmay indicate the policy has been updated, so the label does not exist, but either the binary has not been relabeled or it is a deleted file. Relabeling should happen during %post phase.", "timestamp": "2024-07-11 07:13:35", "update_id": 626486, "user_id": 5290, "id": 3607119, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Yeah, I don't under this either. In the images I looked into, the label is `http_exec_t`.\nhttps://src.fedoraproject.org/rpms/selinux-policy/pull-request/445 is an attempt at a workaround.\n", "timestamp": "2024-07-11 11:36:02", "update_id": 626486, "user_id": 119, "id": 3607257, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Well, I can't really comment on what \"can't possibly happen\" or whatever, but I know what *did* happen: in https://openqa.fedoraproject.org/tests/2722892 we installed FreeIPA (including httpd) with `selinux-policy-targeted-40.23-1.fc40.noarch` and it worked, then we upgraded to `selinux-policy-targeted-41.8-1.fc41.noarch` and it failed. No other version of `selinux-policy-targeted` was installed during the lifetime of the test. You can check this yourself from https://openqa.fedoraproject.org/tests/2722892/file/role_deploy_domain_controller_check-var_log.tar.gz .\n\nYou can see exactly the same in https://openqa.fedoraproject.org/tests/2723862 , the most recent run of the same test on this update. It installed FreeIPA with `selinux-policy-targeted-40.23-1.fc40.noarch` and it worked, then it upgraded directly to Fedora 41 including `selinux-policy-targeted-41.8-1.fc41.noarch` and it failed. You can see this in the dnf transaction log:\n```\n2024-07-10T19:02:35-0400 DEBUG ---> Package selinux-policy.noarch 40.23-1.fc40 will be upgraded\n2024-07-10T19:02:35-0400 DEBUG ---> Package selinux-policy.noarch 41.8-1.fc41 will be an upgrade\n2024-07-10T19:02:35-0400 DEBUG ---> Package selinux-policy-targeted.noarch 40.23-1.fc40 will be upgraded\n2024-07-10T19:02:35-0400 DEBUG ---> Package selinux-policy-targeted.noarch 41.8-1.fc41 will be an upgrade\n```\nThere is no other version there.\n\nI also verified, as I said, that if I backport the removal of `publicfile` to Fedora 40, so when we install FreeIPA (httpd) on Fedora 40 it happens with an selinux-policy package with no `publicfile` module, the test passes.", "timestamp": "2024-07-11 15:06:53", "update_id": 626486, "user_id": 302, "id": 3607565, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}], "builds": [{"nvr": "selinux-policy-41.8-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-2711625691", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.7-1.fc41.\n\n##### **Changelog**\n\n```\n* Fri Jun 28 2024 Zdenek Pytela <zpytela@redhat.com> - 41.7-1\n- Confine libvirt-dbus\n- Allow virtqemud the kill capability in user namespace\n- Allow rshim get options of the netlink class for KOBJECT_UEVENT family\n- Allow dhcpcd the kill capability\n- Allow systemd-networkd list /var/lib/systemd/network\n- Allow sysadm_t run systemd-nsresourced bpf programs\n- Update policy for systemd generators interactions\n- Allow create memory.pressure files with cgroup_memory_pressure_t\n- Add support for libvirt hooks\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```\n\n----\n\nAutomatic update for selinux-policy-41.6-1.fc41.\n", "type": "unspecified", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-06-29 13:19:07", "date_modified": null, "date_approved": null, "date_testing": "2024-06-29 13:21:02", "date_stable": null, "alias": "FEDORA-2024-64134f8805", "test_gating_status": "failed", "from_tag": null, "date_pushed": "2024-06-29 13:21:02", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-64134f8805", "title": "selinux-policy-41.7-1.fc41", "version_hash": "acb988083fb333a9964f57744ab2f1731f456d14", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-06-29 13:19:07", "update_id": 624368, "user_id": 91, "id": 3594477, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [selinux-policy-41.6-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-b986539adf), and has inherited its bugs and notes.", "timestamp": "2024-06-29 13:19:08", "update_id": 624368, "user_id": 91, "id": 3594479, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-29 13:19:10", "update_id": 624368, "user_id": 91, "id": 3594480, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-06-29 14:02:36", "update_id": 624368, "user_id": 91, "id": 3594496, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "@zpytela sorry, I somehow missed this update failing tests (it was during a long weekend here). It looks like the publicfile_t denials are still around and are enough to break FreeIPA server deployment, which makes the tests fail. The remaining denials:\n\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org audit[9984]: AVC avc:  denied  { create } for  pid=9984 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=netlink_route_socket permissive=0\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org audit[9984]: AVC avc:  denied  { create } for  pid=9984 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org audit[9984]: AVC avc:  denied  { create } for  pid=9984 comm=\"httpd\" scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:system_r:publicfile_t:s0 tclass=udp_socket permissive=0\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org audit[9984]: AVC avc:  denied  { search } for  pid=9984 comm=\"httpd\" name=\"httpd\" dev=\"dm-0\" ino=353970 scontext=system_u:system_r:publicfile_t:s0 tcontext=system_u:object_r:httpd_config_t:s0 tclass=dir permissive=0\n\nhttpd.service log:\n\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org systemd[1]: Starting httpd.service - The Apache HTTP Server...\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[9981]: ipa: INFO: KDC proxy enabled\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org ipa-httpd-kdcproxy[9981]: ipa-httpd-kdcproxy: INFO     KDC proxy enabled\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org (httpd)[9984]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org httpd[9984]: httpd: Could not open configuration file /etc/httpd/conf/httpd.conf: Permission denied\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Main process exited, code=exited, status=1/FAILURE\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org systemd[1]: httpd.service: Failed with result 'exit-code'.\n    Jun 29 14:07:33 ipa001.test.openqa.fedoraproject.org systemd[1]: Failed to start httpd.service - The Apache HTTP Server.\n\nand from the IPA server deployment log, confirming it fails because httpd.service fails:\n\n    2024-06-29T14:07:33Z DEBUG The ipa-server-install command failed, exception: CalledProcessError: CalledProcessError(Command ['/bin/systemctl', 'start', 'httpd.service'] returned non-zero exit status 1: 'Job for httpd.service failed because the control process exited with error code.\\nSee \"systemctl status httpd.service\" and \"journalctl -xeu httpd.service\" for details.\\n')\n    2024-06-29T14:07:33Z ERROR CalledProcessError(Command ['/bin/systemctl', 'start', 'httpd.service'] returned non-zero exit status 1: 'Job for httpd.service failed because the control process exited with error code.\\nSee \"systemctl status httpd.service\" and \"journalctl -xeu httpd.service\" for details.\\n')\n\n", "timestamp": "2024-07-05 15:08:10", "update_id": 624368, "user_id": 302, "id": 3600824, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-07-06 09:33:21", "update_id": 624368, "user_id": 91, "id": 3601833, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-07-06 10:24:09", "update_id": 624368, "user_id": 91, "id": 3602145, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This blocks https://bodhi.fedoraproject.org/updates/FEDORA-2024-3aafcac6a8 :(", "timestamp": "2024-07-10 04:31:13", "update_id": 624368, "user_id": 119, "id": 3605878, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Maybe https://github.com/fedora-selinux/selinux-policy/pull/2225 would solve the issue? Can we test it without making a bodhi update?", "timestamp": "2024-07-10 05:43:34", "update_id": 624368, "user_id": 119, "id": 3605894, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "I think now I finally understand why publicfile_t started to appear after the first update which contained the bin-sbin merge.\nhttps://github.com/fedora-selinux/selinux-policy/blob/rawhide/policy/modules/contrib/publicfile.fc#L2\nhttps://github.com/fedora-selinux/selinux-policy/blob/rawhide/policy/modules/contrib/apache.fc#L68\n\n", "timestamp": "2024-07-10 06:50:47", "update_id": 624368, "user_id": 5290, "id": 3605915, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Great find! I assume that the correct fix is to drop the publicfile_t mapping? Will you prep a patch?", "timestamp": "2024-07-10 07:18:45", "update_id": 624368, "user_id": 119, "id": 3605919, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zbyszek", "email": "zbyszek@in.waw.pl", "id": 119, "avatar": "https://seccdn.libravatar.org/avatar/9e521f4e57c4a91bd8818885e1baba425894908e140a76d1c0c697e237cb3b6e?s=24&d=retro", "openid": "zbyszek.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-41.8-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-2711625691).", "timestamp": "2024-07-10 11:32:33", "update_id": 624368, "user_id": 91, "id": 3606099, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.7-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-64134f8805", "karma": -1, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": false, "stable_karma": 5, "stable_days": 14, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New F40 selinux-policy build", "type": "bugfix", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-06-20 18:34:03", "date_modified": null, "date_approved": "2024-06-24 19:42:27", "date_testing": "2024-06-21 02:39:19", "date_stable": "2024-06-25 02:26:02", "alias": "FEDORA-2024-2bc43119f3", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-06-25 02:26:02", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-2bc43119f3", "title": "selinux-policy-40.23-1.fc40", "version_hash": "a668b9d23626037df97816671a4396a830f1966e", "release": {"name": "F40", "long_name": "Fedora 40", "version": "40", "id_prefix": "FEDORA", "branch": "f40", "dist_tag": "f40", "stable_tag": "f40-updates", "testing_tag": "f40-updates-testing", "candidate_tag": "f40-updates-candidate", "pending_signing_tag": "f40-signing-pending", "pending_testing_tag": "f40-updates-testing-pending", "pending_stable_tag": "f40-updates-pending", "override_tag": "f40-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-05-13", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by zpytela. ", "timestamp": "2024-06-20 18:34:04", "update_id": 622171, "user_id": 91, "id": 3583608, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-20 18:34:05", "update_id": 622171, "user_id": 91, "id": 3583609, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-20 18:34:05", "update_id": 622171, "user_id": 91, "id": 3583610, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-06-20 20:21:24", "update_id": 622171, "user_id": 91, "id": 3583678, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "So far OK.", "timestamp": "2024-06-21 01:51:07", "update_id": 622171, "user_id": 4756, "id": 3584292, "bug_feedback": [{"karma": 0, "comment_id": 3584292, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584292, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 1, "comment_id": 3584292, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2024-06-21 02:39:54", "update_id": 622171, "user_id": 91, "id": 3584362, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 06:50:56", "update_id": 622171, "user_id": 7536, "id": 3584472, "bug_feedback": [{"karma": 0, "comment_id": 3584472, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584472, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584472, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "eifr0980", "email": "eifr@duck.com", "id": 7536, "avatar": "https://seccdn.libravatar.org/avatar/e0a4972826a5837e426ea49d55c0cf21d9abab8f0395bf4bab0165cbc1a68b2d?s=24&d=retro", "openid": "eifr0980.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2024-06-21 06:53:24", "update_id": 622171, "user_id": 91, "id": 3584473, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "Does not solve BZ#2292191.\n\n```\nJun 21 13:06:40 fedora kernel: audit: type=1400 audit(1718967999.727:7): avc:  denied  { read write } for  pid=1482 comm=\"systemd-fstab-g\" path=\"/run/systemd/generator/dev-mapper-luks\\x2d0b30619e\\x2deb68\\x2d4f6c\\x2d8335\\x2d16c0b2a50651.device.d/.#50-device-timeout.confda29754026ca7e03\" dev=\"tmpfs\" ino=1026 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:systemd_cryptsetup_generator_unit_file_t:s0 tclass=file permissive=0\n```\n\nThe outcome of the denial remains the same as well.\n\nMore at https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 11:31:24", "update_id": 622171, "user_id": 7249, "id": 3584769, "bug_feedback": [{"karma": 0, "comment_id": 3584769, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584769, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584769, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2024-06-21 11:31:24", "update_id": 622171, "user_id": 91, "id": 3584770, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 13:10:35", "update_id": 622171, "user_id": 5881, "id": 3584859, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "geraldosimiao", "email": "geraldo.simiao.kutz@gmail.com", "id": 5881, "avatar": "https://seccdn.libravatar.org/avatar/03fa5b58e8ac78544bf41ad8ecf9ee1920f2ebedb86542c2f4cdf7ef15813168?s=24&d=retro", "openid": "geraldosimiao.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "fedora-br"}, {"name": "advocates"}, {"name": "respins-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@py0xc3 I expected this would take more iterations.\nPlease take into consideration that majority of previous problems were resolved and give negative karma only if the new build brings a regression, so that this build can help a lot of users. \n", "timestamp": "2024-06-21 13:24:51", "update_id": 622171, "user_id": 5290, "id": 3584867, "bug_feedback": [{"karma": 0, "comment_id": 3584867, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584867, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584867, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "@zpytela sorry. Yeah, the build generally works. In my case, it behaves widely equal as the one before, except the one difference mentioned in the bug report [1]\n\n[1] https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 13:34:49", "update_id": 622171, "user_id": 7249, "id": 3584882, "bug_feedback": [{"karma": 0, "comment_id": 3584882, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584882, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584882, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 14:34:13", "update_id": 622171, "user_id": 7096, "id": 3584891, "bug_feedback": [{"karma": 0, "comment_id": 3584891, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584891, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3584891, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "steiner", "email": "daimarstein@pm.me", "id": 7096, "avatar": "https://seccdn.libravatar.org/avatar/041b9c7aa39cf8b9e55b0db9930bf898bfbb809fb047d5c3316998e0af050abd?s=24&d=retro", "openid": "steiner.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-socialmedia"}, {"name": "marketing"}, {"name": "designteam"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-06-22 06:59:01", "update_id": 622171, "user_id": 449, "id": 3586037, "bug_feedback": [{"karma": 0, "comment_id": 3586037, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3586037, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3586037, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works.", "timestamp": "2024-06-22 07:36:28", "update_id": 622171, "user_id": 198, "id": 3586043, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "no regressions noted", "timestamp": "2024-06-23 03:09:14", "update_id": 622171, "user_id": 124, "id": 3586633, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "filiperosset", "email": "rosset.filipe@gmail.com", "id": 124, "avatar": "https://seccdn.libravatar.org/avatar/f4394b8fb4c9a99c4b534dc724912fe75a5b87fe15048985ece8388c2441d0ca?s=24&d=retro", "openid": "filiperosset.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "trust admins"}, {"name": "signed_fpca"}, {"name": "fedora-contributor"}, {"name": "l10n"}, {"name": "cvsl10n"}, {"name": "ipausers"}, {"name": "fedora-br"}, {"name": "fedorabugs"}, {"name": "ambassadors"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by zpytela. ", "timestamp": "2024-06-24 07:10:12", "update_id": 622171, "user_id": 91, "id": 3587333, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "As asked by py0xc3, I am responding here since this doesn't fix my issue. Please see this [Fedora Discussion post](https://discussion.fedoraproject.org/t/selinux-execheap-denials/120638).", "timestamp": "2024-06-24 18:45:13", "update_id": 622171, "user_id": 8285, "id": 3587937, "bug_feedback": [{"karma": 0, "comment_id": 3587937, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3587937, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3587937, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "ben-g", "email": "ben@frigidstar.net", "id": 8285, "avatar": "https://seccdn.libravatar.org/avatar/69173d22df6219849c8628a3682cb7b45d538c1b93cb31c9cdc976083bfd94b5?s=24&d=retro", "openid": "ben-g.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Seems to fix https://bugzilla.redhat.com/show_bug.cgi?id=2292068 which is not linked to this update.", "timestamp": "2024-06-24 19:42:27", "update_id": 622171, "user_id": 3555, "id": 3588016, "bug_feedback": [{"karma": 0, "comment_id": 3588016, "bug_id": 2254206, "bug": {"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3588016, "bug_id": 2283187, "bug": {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 3588016, "bug_id": 2291304, "bug": {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "jsbillings", "email": "billings@negate.org", "id": 3555, "avatar": "https://seccdn.libravatar.org/avatar/5dd296975772475f570fb427d1903943b2c2fbb4bb3181c99c8f8caf14984d9c?s=24&d=retro", "openid": "jsbillings.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "centosproject-email-aliases"}, {"name": "sig-storage"}, {"name": "gitlab-centos-sig-storage"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2024-06-25 02:27:01", "update_id": 622171, "user_id": 91, "id": 3588782, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-40.23-1.fc40", "signed": true, "release_id": 76, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 2254206, "title": "/usr/bin/sepolgen-ifgen reports \"Illegal character '\"'\"", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3587937, "bug_id": 2254206, "comment": {"karma": -1, "karma_critpath": 0, "text": "As asked by py0xc3, I am responding here since this doesn't fix my issue. Please see this [Fedora Discussion post](https://discussion.fedoraproject.org/t/selinux-execheap-denials/120638).", "timestamp": "2024-06-24 18:45:13", "update_id": 622171, "user_id": 8285, "id": 3587937, "testcase_feedback": [], "user": {"name": "ben-g", "email": "ben@frigidstar.net", "id": 8285, "avatar": "https://seccdn.libravatar.org/avatar/69173d22df6219849c8628a3682cb7b45d538c1b93cb31c9cdc976083bfd94b5?s=24&d=retro", "openid": "ben-g.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3588016, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems to fix https://bugzilla.redhat.com/show_bug.cgi?id=2292068 which is not linked to this update.", "timestamp": "2024-06-24 19:42:27", "update_id": 622171, "user_id": 3555, "id": 3588016, "testcase_feedback": [], "user": {"name": "jsbillings", "email": "billings@negate.org", "id": 3555, "avatar": "https://seccdn.libravatar.org/avatar/5dd296975772475f570fb427d1903943b2c2fbb4bb3181c99c8f8caf14984d9c?s=24&d=retro", "openid": "jsbillings.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "centosproject-email-aliases"}, {"name": "sig-storage"}, {"name": "gitlab-centos-sig-storage"}]}}}, {"karma": 0, "comment_id": 3584292, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "So far OK.", "timestamp": "2024-06-21 01:51:07", "update_id": 622171, "user_id": 4756, "id": 3584292, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584472, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 06:50:56", "update_id": 622171, "user_id": 7536, "id": 3584472, "testcase_feedback": [], "user": {"name": "eifr0980", "email": "eifr@duck.com", "id": 7536, "avatar": "https://seccdn.libravatar.org/avatar/e0a4972826a5837e426ea49d55c0cf21d9abab8f0395bf4bab0165cbc1a68b2d?s=24&d=retro", "openid": "eifr0980.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3584769, "bug_id": 2254206, "comment": {"karma": -1, "karma_critpath": 0, "text": "Does not solve BZ#2292191.\n\n```\nJun 21 13:06:40 fedora kernel: audit: type=1400 audit(1718967999.727:7): avc:  denied  { read write } for  pid=1482 comm=\"systemd-fstab-g\" path=\"/run/systemd/generator/dev-mapper-luks\\x2d0b30619e\\x2deb68\\x2d4f6c\\x2d8335\\x2d16c0b2a50651.device.d/.#50-device-timeout.confda29754026ca7e03\" dev=\"tmpfs\" ino=1026 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:systemd_cryptsetup_generator_unit_file_t:s0 tclass=file permissive=0\n```\n\nThe outcome of the denial remains the same as well.\n\nMore at https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 11:31:24", "update_id": 622171, "user_id": 7249, "id": 3584769, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584867, "bug_id": 2254206, "comment": {"karma": 0, "karma_critpath": 0, "text": "@py0xc3 I expected this would take more iterations.\nPlease take into consideration that majority of previous problems were resolved and give negative karma only if the new build brings a regression, so that this build can help a lot of users. \n", "timestamp": "2024-06-21 13:24:51", "update_id": 622171, "user_id": 5290, "id": 3584867, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584882, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela sorry. Yeah, the build generally works. In my case, it behaves widely equal as the one before, except the one difference mentioned in the bug report [1]\n\n[1] https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 13:34:49", "update_id": 622171, "user_id": 7249, "id": 3584882, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584891, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 14:34:13", "update_id": 622171, "user_id": 7096, "id": 3584891, "testcase_feedback": [], "user": {"name": "steiner", "email": "daimarstein@pm.me", "id": 7096, "avatar": "https://seccdn.libravatar.org/avatar/041b9c7aa39cf8b9e55b0db9930bf898bfbb809fb047d5c3316998e0af050abd?s=24&d=retro", "openid": "steiner.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-socialmedia"}, {"name": "marketing"}, {"name": "designteam"}]}}}, {"karma": 0, "comment_id": 3586037, "bug_id": 2254206, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-06-22 06:59:01", "update_id": 622171, "user_id": 449, "id": 3586037, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2283187, "title": "SELinux is preventing systemd-fstab-g from 'execute' accesses on the tiedosto /usr/bin/ntfsck.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3587937, "bug_id": 2283187, "comment": {"karma": -1, "karma_critpath": 0, "text": "As asked by py0xc3, I am responding here since this doesn't fix my issue. Please see this [Fedora Discussion post](https://discussion.fedoraproject.org/t/selinux-execheap-denials/120638).", "timestamp": "2024-06-24 18:45:13", "update_id": 622171, "user_id": 8285, "id": 3587937, "testcase_feedback": [], "user": {"name": "ben-g", "email": "ben@frigidstar.net", "id": 8285, "avatar": "https://seccdn.libravatar.org/avatar/69173d22df6219849c8628a3682cb7b45d538c1b93cb31c9cdc976083bfd94b5?s=24&d=retro", "openid": "ben-g.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3588016, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems to fix https://bugzilla.redhat.com/show_bug.cgi?id=2292068 which is not linked to this update.", "timestamp": "2024-06-24 19:42:27", "update_id": 622171, "user_id": 3555, "id": 3588016, "testcase_feedback": [], "user": {"name": "jsbillings", "email": "billings@negate.org", "id": 3555, "avatar": "https://seccdn.libravatar.org/avatar/5dd296975772475f570fb427d1903943b2c2fbb4bb3181c99c8f8caf14984d9c?s=24&d=retro", "openid": "jsbillings.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "centosproject-email-aliases"}, {"name": "sig-storage"}, {"name": "gitlab-centos-sig-storage"}]}}}, {"karma": 0, "comment_id": 3584292, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "So far OK.", "timestamp": "2024-06-21 01:51:07", "update_id": 622171, "user_id": 4756, "id": 3584292, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584472, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 06:50:56", "update_id": 622171, "user_id": 7536, "id": 3584472, "testcase_feedback": [], "user": {"name": "eifr0980", "email": "eifr@duck.com", "id": 7536, "avatar": "https://seccdn.libravatar.org/avatar/e0a4972826a5837e426ea49d55c0cf21d9abab8f0395bf4bab0165cbc1a68b2d?s=24&d=retro", "openid": "eifr0980.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3584769, "bug_id": 2283187, "comment": {"karma": -1, "karma_critpath": 0, "text": "Does not solve BZ#2292191.\n\n```\nJun 21 13:06:40 fedora kernel: audit: type=1400 audit(1718967999.727:7): avc:  denied  { read write } for  pid=1482 comm=\"systemd-fstab-g\" path=\"/run/systemd/generator/dev-mapper-luks\\x2d0b30619e\\x2deb68\\x2d4f6c\\x2d8335\\x2d16c0b2a50651.device.d/.#50-device-timeout.confda29754026ca7e03\" dev=\"tmpfs\" ino=1026 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:systemd_cryptsetup_generator_unit_file_t:s0 tclass=file permissive=0\n```\n\nThe outcome of the denial remains the same as well.\n\nMore at https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 11:31:24", "update_id": 622171, "user_id": 7249, "id": 3584769, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584867, "bug_id": 2283187, "comment": {"karma": 0, "karma_critpath": 0, "text": "@py0xc3 I expected this would take more iterations.\nPlease take into consideration that majority of previous problems were resolved and give negative karma only if the new build brings a regression, so that this build can help a lot of users. \n", "timestamp": "2024-06-21 13:24:51", "update_id": 622171, "user_id": 5290, "id": 3584867, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584882, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela sorry. Yeah, the build generally works. In my case, it behaves widely equal as the one before, except the one difference mentioned in the bug report [1]\n\n[1] https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 13:34:49", "update_id": 622171, "user_id": 7249, "id": 3584882, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584891, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 14:34:13", "update_id": 622171, "user_id": 7096, "id": 3584891, "testcase_feedback": [], "user": {"name": "steiner", "email": "daimarstein@pm.me", "id": 7096, "avatar": "https://seccdn.libravatar.org/avatar/041b9c7aa39cf8b9e55b0db9930bf898bfbb809fb047d5c3316998e0af050abd?s=24&d=retro", "openid": "steiner.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-socialmedia"}, {"name": "marketing"}, {"name": "designteam"}]}}}, {"karma": 0, "comment_id": 3586037, "bug_id": 2283187, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-06-22 06:59:01", "update_id": 622171, "user_id": 449, "id": 3586037, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}, {"bug_id": 2291304, "title": "Selinux prevents libvirt virtproxy to send dbus messages", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 3587937, "bug_id": 2291304, "comment": {"karma": -1, "karma_critpath": 0, "text": "As asked by py0xc3, I am responding here since this doesn't fix my issue. Please see this [Fedora Discussion post](https://discussion.fedoraproject.org/t/selinux-execheap-denials/120638).", "timestamp": "2024-06-24 18:45:13", "update_id": 622171, "user_id": 8285, "id": 3587937, "testcase_feedback": [], "user": {"name": "ben-g", "email": "ben@frigidstar.net", "id": 8285, "avatar": "https://seccdn.libravatar.org/avatar/69173d22df6219849c8628a3682cb7b45d538c1b93cb31c9cdc976083bfd94b5?s=24&d=retro", "openid": "ben-g.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3588016, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "Seems to fix https://bugzilla.redhat.com/show_bug.cgi?id=2292068 which is not linked to this update.", "timestamp": "2024-06-24 19:42:27", "update_id": 622171, "user_id": 3555, "id": 3588016, "testcase_feedback": [], "user": {"name": "jsbillings", "email": "billings@negate.org", "id": 3555, "avatar": "https://seccdn.libravatar.org/avatar/5dd296975772475f570fb427d1903943b2c2fbb4bb3181c99c8f8caf14984d9c?s=24&d=retro", "openid": "jsbillings.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "centosproject-email-aliases"}, {"name": "sig-storage"}, {"name": "gitlab-centos-sig-storage"}]}}}, {"karma": 1, "comment_id": 3584292, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "So far OK.", "timestamp": "2024-06-21 01:51:07", "update_id": 622171, "user_id": 4756, "id": 3584292, "testcase_feedback": [], "user": {"name": "nixuser", "email": "nixuser@mail.com", "id": 4756, "avatar": "https://seccdn.libravatar.org/avatar/365861a25716b355bf17bd01d55d25c29e1d98a79e197ef46bd8cfafdd93c836?s=24&d=retro", "openid": "nixuser.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584472, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 06:50:56", "update_id": 622171, "user_id": 7536, "id": 3584472, "testcase_feedback": [], "user": {"name": "eifr0980", "email": "eifr@duck.com", "id": 7536, "avatar": "https://seccdn.libravatar.org/avatar/e0a4972826a5837e426ea49d55c0cf21d9abab8f0395bf4bab0165cbc1a68b2d?s=24&d=retro", "openid": "eifr0980.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 3584769, "bug_id": 2291304, "comment": {"karma": -1, "karma_critpath": 0, "text": "Does not solve BZ#2292191.\n\n```\nJun 21 13:06:40 fedora kernel: audit: type=1400 audit(1718967999.727:7): avc:  denied  { read write } for  pid=1482 comm=\"systemd-fstab-g\" path=\"/run/systemd/generator/dev-mapper-luks\\x2d0b30619e\\x2deb68\\x2d4f6c\\x2d8335\\x2d16c0b2a50651.device.d/.#50-device-timeout.confda29754026ca7e03\" dev=\"tmpfs\" ino=1026 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:systemd_cryptsetup_generator_unit_file_t:s0 tclass=file permissive=0\n```\n\nThe outcome of the denial remains the same as well.\n\nMore at https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 11:31:24", "update_id": 622171, "user_id": 7249, "id": 3584769, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584867, "bug_id": 2291304, "comment": {"karma": 0, "karma_critpath": 0, "text": "@py0xc3 I expected this would take more iterations.\nPlease take into consideration that majority of previous problems were resolved and give negative karma only if the new build brings a regression, so that this build can help a lot of users. \n", "timestamp": "2024-06-21 13:24:51", "update_id": 622171, "user_id": 5290, "id": 3584867, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 3584882, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela sorry. Yeah, the build generally works. In my case, it behaves widely equal as the one before, except the one difference mentioned in the bug report [1]\n\n[1] https://bugzilla.redhat.com/show_bug.cgi?id=2292191", "timestamp": "2024-06-21 13:34:49", "update_id": 622171, "user_id": 7249, "id": 3584882, "testcase_feedback": [], "user": {"name": "py0xc3", "email": "py0xc3@posteo.net", "id": 7249, "avatar": "https://seccdn.libravatar.org/avatar/cd15fd5361c55bb6ed4675dae968b1cec6e0e7695ea75520fafc58bdb0030a6b?s=24&d=retro", "openid": "py0xc3.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "docs"}, {"name": "ask-fedora"}]}}}, {"karma": 0, "comment_id": 3584891, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2024-06-21 14:34:13", "update_id": 622171, "user_id": 7096, "id": 3584891, "testcase_feedback": [], "user": {"name": "steiner", "email": "daimarstein@pm.me", "id": 7096, "avatar": "https://seccdn.libravatar.org/avatar/041b9c7aa39cf8b9e55b0db9930bf898bfbb809fb047d5c3316998e0af050abd?s=24&d=retro", "openid": "steiner.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-socialmedia"}, {"name": "marketing"}, {"name": "designteam"}]}}}, {"karma": 0, "comment_id": 3586037, "bug_id": 2291304, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me..", "timestamp": "2024-06-22 06:59:01", "update_id": 622171, "user_id": 449, "id": 3586037, "testcase_feedback": [], "user": {"name": "g6avk", "email": "colin.thomson@g6avk.co.uk", "id": 449, "avatar": "https://seccdn.libravatar.org/avatar/a9a8954c462d35fa59f7eeec4e480384f9d1ec0271262a4530bfbf09340120f5?s=24&d=retro", "openid": "g6avk.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}]}], "updateid": "FEDORA-2024-2bc43119f3", "karma": 8, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.6-1.fc41.\n\n##### **Changelog**\n\n```\n* Wed Jun 19 2024 Zdenek Pytela <zpytela@redhat.com> - 41.6-1\n- Allow certmonger read and write tpm devices\n- Allow all domains to connect to systemd-nsresourced over a unix socket\n- Allow systemd-machined read the vsock device\n- Update policy for systemd generators\n- Allow ptp4l_t request that the kernel load a kernel module\n- Allow sbd to trace processes in user namespace\n- Allow request-key execute scripts\n- Update policy for haproxyd\n* Tue Jun 18 2024 Zdenek Pytela <zpytela@redhat.com> - 41.5-1\n- Update policy for systemd-nsresourced\n- Correct sbin-related file context entries\n* Mon Jun 17 2024 Zdenek Pytela <zpytela@redhat.com> - 41.4-1\n- Allow login_userdomain execute systemd-tmpfiles in the caller domain\n- Allow virt_driver_domain read files labeled unconfined_t\n- Allow virt_driver_domain dbus chat with policykit\n- Allow virtqemud manage nfs files when virt_use_nfs boolean is on\n- Add rules for interactions between generators\n- Label memory.pressure files with cgroup_memory_pressure_t\n- Revert \"Allow some systemd services write to cgroup files\"\n- Update policy for systemd-nsresourced\n- Label /usr/bin/ntfsck with fsadm_exec_t\n- Allow systemd_fstab_generator_t read tmpfs files\n- Update policy for systemd-nsresourced\n- Alias /usr/sbin to /usr/bin and change all /usr/sbin paths to /usr/bin\n- Remove a few lines duplicated between {dkim,milter}.fc\n- Alias /bin \u2192 /usr/bin and remove redundant paths\n- Drop duplicate line for /usr/sbin/unix_chkpwd\n- Drop duplicate paths for /usr/sbin\n\n```", "type": "unspecified", "status": "obsolete", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-06-20 09:26:18", "date_modified": null, "date_approved": null, "date_testing": "2024-06-20 10:17:41", "date_stable": null, "alias": "FEDORA-2024-b986539adf", "test_gating_status": "failed", "from_tag": null, "date_pushed": "2024-06-20 10:17:41", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-b986539adf", "title": "selinux-policy-41.6-1.fc41", "version_hash": "e3e26430edd559a7fd4070a2679eec28ea4f3638", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-06-20 09:26:18", "update_id": 622050, "user_id": 91, "id": 3576893, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-20 09:26:20", "update_id": 622050, "user_id": 91, "id": 3576894, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'failed'.", "timestamp": "2024-06-20 10:17:44", "update_id": 622050, "user_id": 91, "id": 3576913, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "https://src.fedoraproject.org/rpms/selinux-policy/pull-request/438#comment-205168", "timestamp": "2024-06-20 15:28:29", "update_id": 622050, "user_id": 302, "id": 3583086, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@adamwill is there any problem with this build? still in testing after 4 days", "timestamp": "2024-06-24 11:22:34", "update_id": 622050, "user_id": 5290, "id": 3587485, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted by [selinux-policy-41.7-1.fc41](https://bodhi.fedoraproject.org/updates/FEDORA-2024-64134f8805).", "timestamp": "2024-06-29 13:19:08", "update_id": 622050, "user_id": 91, "id": 3594478, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.6-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-b986539adf", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.3-1.eln140.\n\n##### **Changelog**\n\n```\n* Tue Jun 11 2024 Zdenek Pytela <zpytela@redhat.com> - 41.3-1\n- Update systemd-generator policy\n- Remove permissive domain for bootupd_t\n- Remove permissive domain for coreos_installer_t\n- Remove permissive domain for afterburn_t\n- Add the sap module to modules.conf\n- Move unconfined_domain(sap_unconfined_t) to an optional block\n- Create the sap module\n- Allow systemd-coredumpd sys_admin and sys_resource capabilities\n- Allow systemd-coredump read nsfs files\n- Allow generators auto file transition only for plain files\n- Allow systemd-hwdb write to the kernel messages device\n- Escape \"interface\" as a file name in a virt filetrans pattern\n- Allow gnome-software work for login_userdomain\n- Allow systemd-machined manage runtime sockets\n- Revert \"Allow systemd-machined manage runtime sockets\"\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": "", "close_bugs": true, "date_submitted": "2024-06-20 03:59:06", "date_modified": null, "date_approved": "2024-06-20 13:14:24", "date_testing": "2024-06-20 13:11:58", "date_stable": "2024-06-20 13:14:24", "alias": "FEDORA-2024-f9bebccade", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2024-06-20 13:14:24", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-f9bebccade", "title": "selinux-policy-41.3-1.eln140", "version_hash": "641db371b3300949cf0c57742e1af98378a8eb57", "release": {"name": "ELN", "long_name": "Fedora ELN", "version": "eln", "id_prefix": "FEDORA", "branch": "eln", "dist_tag": "eln", "stable_tag": "eln", "testing_tag": "eln-updates-testing", "candidate_tag": "eln-updates-candidate", "pending_signing_tag": "eln-signing-pending", "pending_testing_tag": "eln-updates-testing-pending", "pending_stable_tag": "eln-updates-pending", "override_tag": "eln-override", "mail_template": "fedora_errata_template", "state": "pending", "composed_by_bodhi": false, "create_automatic_updates": true, "package_manager": "unspecified", "testing_repository": null, "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 0, "mandatory_days_in_testing": 0, "critpath_min_karma": 2, "min_karma": 1, "setting_status": "pre_beta"}, "user": {"name": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org", "email": null, "id": 6654, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "distrobuildsync-eln/jenkins-continuous-infra.apps.ci.centos.org.id.fedoraproject.org", "groups": []}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-06-20 03:59:06", "update_id": 621354, "user_id": 91, "id": 3573903, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-06-20 04:08:57", "update_id": 621354, "user_id": 91, "id": 3576057, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-20 13:11:58", "update_id": 621354, "user_id": 91, "id": 3581380, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2024-06-20 13:11:58", "update_id": 621354, "user_id": 91, "id": 3581381, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-06-20 13:14:24", "update_id": 621354, "user_id": 91, "id": 3581452, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.3-1.eln140", "signed": true, "release_id": 46, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-f9bebccade", "karma": 0, "content_type": "rpm", "test_cases": []}, {"autokarma": false, "autotime": true, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "Automatic update for selinux-policy-41.3-1.fc41.\n\n##### **Changelog**\n\n```\n* Tue Jun 11 2024 Zdenek Pytela <zpytela@redhat.com> - 41.3-1\n- Update systemd-generator policy\n- Remove permissive domain for bootupd_t\n- Remove permissive domain for coreos_installer_t\n- Remove permissive domain for afterburn_t\n- Add the sap module to modules.conf\n- Move unconfined_domain(sap_unconfined_t) to an optional block\n- Create the sap module\n- Allow systemd-coredumpd sys_admin and sys_resource capabilities\n- Allow systemd-coredump read nsfs files\n- Allow generators auto file transition only for plain files\n- Allow systemd-hwdb write to the kernel messages device\n- Escape \"interface\" as a file name in a virt filetrans pattern\n- Allow gnome-software work for login_userdomain\n- Allow systemd-machined manage runtime sockets\n- Revert \"Allow systemd-machined manage runtime sockets\"\n\n```", "type": "unspecified", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": "core critical-path-compose critical-path-server", "close_bugs": true, "date_submitted": "2024-06-14 12:09:25", "date_modified": null, "date_approved": "2024-06-14 14:14:20", "date_testing": "2024-06-14 12:11:27", "date_stable": "2024-06-14 14:14:20", "alias": "FEDORA-2024-20da58ce4b", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2024-06-14 14:14:20", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2024-20da58ce4b", "title": "selinux-policy-41.3-1.fc41", "version_hash": "08faac002c15b683e9a57cc29516a1a84295f69b", "release": {"name": "F41", "long_name": "Fedora 41", "version": "41", "id_prefix": "FEDORA", "branch": "f41", "dist_tag": "f41", "stable_tag": "f41-updates", "testing_tag": "f41-updates-testing", "candidate_tag": "f41-updates-candidate", "pending_signing_tag": "f41-signing-pending", "pending_testing_tag": "f41-updates-testing-pending", "pending_stable_tag": "f41-updates-pending", "override_tag": "f41-override", "mail_template": "fedora_errata_template", "state": "current", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": "2025-11-11", "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update was automatically created", "timestamp": "2024-06-14 12:09:25", "update_id": 617866, "user_id": 91, "id": 3561660, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2024-06-14 12:09:27", "update_id": 617866, "user_id": 91, "id": 3561661, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'passed'.", "timestamp": "2024-06-14 14:11:42", "update_id": 617866, "user_id": 91, "id": 3561786, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi", "timestamp": "2024-06-14 14:14:21", "update_id": 617866, "user_id": 91, "id": 3561787, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-41.3-1.fc41", "signed": true, "release_id": 80, "type": "rpm", "epoch": 0}], "bugs": [], "updateid": "FEDORA-2024-20da58ce4b", "karma": 0, "content_type": "rpm", "test_cases": []}], "page": 6, "pages": 43, "rows_per_page": 20, "total": 848, "chrome": true, "display_user": true, "display_request": true, "package": "selinux-policy"}