{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=604115", "type": "bugfix", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2015-01-27 16:47:13", "date_modified": null, "date_approved": null, "date_testing": "2015-01-30 04:33:05", "date_stable": "2015-01-30 23:55:34", "alias": "FEDORA-2015-1337", "test_gating_status": null, "from_tag": null, "date_pushed": "2015-01-30 23:55:34", "meets_testing_requirements": false, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2015-1337", "title": "selinux-policy-3.13.1-105.fc21", "version_hash": "67f109e74fe3acd84544d28291eeb2266c35162b", "release": {"name": "F21", "long_name": "Fedora 21", "version": "21", "id_prefix": "FEDORA", "branch": "f21", "dist_tag": "f21", "stable_tag": "f21-updates", "testing_tag": "f21-updates-testing", "candidate_tag": "f21-updates-candidate", "pending_signing_tag": "", "pending_testing_tag": "f21-updates-testing-pending", "pending_stable_tag": "f21-updates-pending", "override_tag": "f21-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lvrabec. ", "timestamp": "2015-01-27 16:50:17", "update_id": 3025, "user_id": 91, "id": 21362, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on i386. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/32019/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-01-27 17:06:21", "update_id": 3025, "user_id": 100, "id": 21363, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: depcheck test PASSED on x86_64. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/32019/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-01-27 17:06:26", "update_id": 3025, "user_id": 100, "id": 21364, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "fixes Bug 1174278 for me  THX\n\nkarma: +1", "timestamp": "2015-01-27 17:49:54", "update_id": 3025, "user_id": 207, "id": 21365, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Fixes bug #1150106 not listed here", "timestamp": "2015-01-28 12:19:11", "update_id": 3025, "user_id": 509, "id": 21366, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "fantom", "email": "casper@casperlefantom.net", "id": 509, "avatar": "https://seccdn.libravatar.org/avatar/3d9e5571e054c28995308cb1b383c12bf459ac174aeab18437ed6f373dec602e?s=24&d=retro", "openid": "fantom.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ambassadors"}, {"name": "gitspin-kickstarts"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Critical path update approved", "timestamp": "2015-01-28 12:19:13", "update_id": 3025, "user_id": 91, "id": 21367, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "fixes #174915 for me", "timestamp": "2015-01-28 12:25:12", "update_id": 3025, "user_id": 849, "id": 21368, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "ikke", "email": null, "id": 849, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "ikke.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "fixes #1174915 for me\n\nkarma: +1", "timestamp": "2015-01-28 19:57:54", "update_id": 3025, "user_id": 207, "id": 21369, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 21 testing updates repository.", "timestamp": "2015-01-29 16:51:53", "update_id": 3025, "user_id": 91, "id": 21370, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing", "timestamp": "2015-01-30 04:33:05", "update_id": 3025, "user_id": 91, "id": 21371, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2015-01-30 08:18:58", "update_id": 3025, "user_id": 202, "id": 21372, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "dandim", "email": "dan.dim@seznam.cz", "id": 202, "avatar": "https://seccdn.libravatar.org/avatar/f0f96b1ac727426da54b2b24ac6b98a5f075783c24214b710f8893cd9b1ae00e?s=24&d=retro", "openid": "dandim.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has reached the stable karma threshold and will be pushed to the stable updates repository", "timestamp": "2015-01-30 08:19:02", "update_id": 3025, "user_id": 91, "id": 21373, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "Taskotron: upgradepath test PASSED on noarch. Result log:\nhttps://taskotron.fedoraproject.org/taskmaster//builders/x86_64/builds/33070/steps/runtask/logs/stdio\n(results are informative only)", "timestamp": "2015-01-30 08:20:11", "update_id": 3025, "user_id": 100, "id": 21374, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "taskotron", "email": "taskotron@fedoraproject.org", "id": 100, "avatar": "https://seccdn.libravatar.org/avatar/8cba34b3793397cca75782c70d6a4c3af6fc4c8e7d502fad36609e3b4b4670f9?s=24&d=retro", "openid": "taskotron.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 1, "karma_critpath": 0, "text": "Also fixes bug https://bugzilla.redhat.com/show_bug.cgi?id=1174278 for me. THX", "timestamp": "2015-01-30 12:59:08", "update_id": 3025, "user_id": 850, "id": 21375, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "timok", "email": null, "id": 850, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "timok.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update is currently being pushed to the Fedora 21 stable updates repository.", "timestamp": "2015-01-30 13:58:56", "update_id": 3025, "user_id": 91, "id": 21376, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable", "timestamp": "2015-01-30 23:55:34", "update_id": 3025, "user_id": 91, "id": 21377, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "This perfectly fixes bug #1165578 for me, thanks !", "timestamp": "2015-02-02 13:25:45", "update_id": 3025, "user_id": 851, "id": 21378, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "petaramesh", "email": null, "id": 851, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "petaramesh.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "This fixes bug https://bugzilla.redhat.com/show_bug.cgi?id=1175068. Thank you!", "timestamp": "2015-02-09 09:48:05", "update_id": 3025, "user_id": 852, "id": 21379, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "laadidaa", "email": null, "id": 852, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "laadidaa.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-3.13.1-105.fc21", "signed": true, "release_id": null, "type": "rpm", "epoch": null}], "bugs": [{"bug_id": 1156557, "title": "[nagios_system_plugin_t] SELinux is preventing check_procs from getattr access on the file /usr/sbin/nrpe.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1158258, "title": "SELinux is preventing /usr/bin/python2.7 from 'ioctl' accesses on the unix_stream_socket unix_stream_socket.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1159672, "title": "SELinux is preventing /usr/lib/systemd/systemd-logind from 'getattr' accesses on the file /dev/shm/spice.2372.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1162546, "title": "missing SELinux policy for Xorg.bin", "security": false, "parent": false, "feedback": []}, {"bug_id": 1162712, "title": "SELinux AVCs with pcp-webapi", "security": false, "parent": false, "feedback": []}, {"bug_id": 1167109, "title": "/usr/bin/newaliases: No such file or directory", "security": false, "parent": false, "feedback": []}, {"bug_id": 1167759, "title": "selinux denies pam_mount to mount home on Fedora 21", "security": false, "parent": false, "feedback": []}, {"bug_id": 1168112, "title": "SELinux is preventing /usr/bin/python2.7 (deleted) from 'setattr' accesses on the directory /proc.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1169836, "title": "SELinux drops AVC related to certmonger during ipa-server-install", "security": false, "parent": false, "feedback": []}, {"bug_id": 1170083, "title": "SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from 'getattr' accesses on the file /proc/<pid>/stat.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1170084, "title": "SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from 'search' accesses on the directory 3631.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1172413, "title": "SELinux is preventing /usr/bin/touch from 'create' accesses on the file libvirt-guests.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1172774, "title": "SELinux is preventing /usr/bin/freshclam from 'read' accesses on the file filesystems.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 426580, "bug_id": 1172774, "comment": {"karma": 0, "karma_critpath": 0, "text": "SELinux is preventing cat from read access on the file dmesg_restrict.\n\n*****  Plugin catchall (100. confidence) suggests   **************************\n\nIf you believe that cat should be allowed read access on the dmesg_restrict file by default.\nThen you should report this as a bug.\nYou can generate a local policy module to allow this access.\nDo\nallow this access for now by executing:\n# grep cat /var/log/audit/audit.log | audit2allow -M mypol\n# semodule -i mypol.pp\n\nAdditional Information:\nSource Context                system_u:system_r:abrt_t:s0-s0:c0.c1023\nTarget Context                system_u:object_r:proc_security_t:s0\nTarget Objects                dmesg_restrict [ file ]\nSource                        cat\nSource Path                   cat\nPort                          <Unknown>\nHost                          TheMommy\nSource RPM Packages           \nTarget RPM Packages           \nPolicy RPM                    selinux-policy-3.13.1-105.19.fc21.noarch\nSelinux Enabled               True\nPolicy Type                   targeted\nEnforcing Mode                Enforcing\nHost Name                     TheMommy\nPlatform                      Linux TheMommy 4.1.4-100.fc21.x86_64 #1 SMP Tue\n                              Aug 4 03:25:05 UTC 2015 x86_64 x86_64\nAlert Count                   5\nFirst Seen                    2015-09-27 21:46:49 CDT\nLast Seen                     2016-04-16 20:19:18 CDT\nLocal ID                      af853d8a-64e1-418e-b5ec-40b0b4fc6f1c\n\nRaw Audit Messages\ntype=AVC msg=audit(1460855958.825:678): avc:  denied  { read } for  pid=6660 comm=\"cat\" name=\"dmesg_restrict\" dev=\"proc\" ino=109337 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_security_t:s0 tclass=file permissive=0\n\n\nHash: cat,abrt_t,proc_security_t,file,read\n", "timestamp": "2016-05-01 19:36:27", "update_id": 3439, "user_id": 207, "id": 426580, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.fedoraproject.org", "groups": []}}}]}, {"bug_id": 1173486, "title": "RPM verification reports vbetool.pp as missing", "security": false, "parent": false, "feedback": []}, {"bug_id": 1174278, "title": "ecryptfs doesn't automount Private at login since upgrade to FC21 beta", "security": false, "parent": false, "feedback": []}, {"bug_id": 1174915, "title": "OPENSSL_ENABLE_MD5_VERIFY can not be used with NetworkManager & OpenVPN to re-enable MD5 certificate verification", "security": false, "parent": false, "feedback": []}, {"bug_id": 1175054, "title": "SELinux is preventing /usr/bin/kdm (deleted) from 'entrypoint' accesses on the file /etc/kde/kdm/Xsetup.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1175068, "title": "SELinux is preventing /usr/sbin/hddtemp from using the 'sys_admin' capabilities.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1175258, "title": "SELinux is preventing /usr/bin/dbus-launch from 'write' accesses on the file /var/lib/sddm/.dbus/session-bus/c5b7de15f3c24e0a9eb37f4427130ae7-0.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1175927, "title": "SELinux is preventing umount.ecryptfs from read, write access on the file /run/console/brandoni.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1175928, "title": "SELinux is preventing login from 'entrypoint' accesses on the file /usr/sbin/mount.ecryptfs_private.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176226, "title": "SELinux is preventing mv from using the 'setfscreate' accesses on a process.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176289, "title": "SELinux is preventing /usr/bin/mv from 'relabelfrom' accesses on the file .", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176327, "title": "SELinux is preventing /usr/libexec/Xorg.bin from 'write' accesses on the directory /tmp.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176329, "title": "SELinux is preventing bumblebeed from 'read' accesses on the file unix.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176625, "title": "SELinux denials for shorewall", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176711, "title": "SELinux is preventing gpg-agent from 'create' accesses on the file .gpg-agent-info.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176712, "title": "SELinux is preventing mission-control from 'write' accesses on the directory /run/user/1002.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176845, "title": "SELinux is preventing cannaserver from 'search' accesses on the directory /var/lib/sss.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1176848, "title": "SELinux is preventing cannaserver from 'read' accesses on the file /etc/passwd.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177040, "title": "[abrt] dnssec-trigger: subprocess.py:540:check_call:CalledProcessError: Command '['unbound-control', 'flush_zone', '.']' returned non-zero exit status 1", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177051, "title": "bacula-fd generates SELinux alerts when it tries to back up a FIFO.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177296, "title": "SELinux is preventing /usr/libexec/bluetooth/bluetoothd from 'write' accesses on the file brightness.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177632, "title": "SELinux is preventing revalidator5 from search access on the directory net.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177716, "title": "[PATCH] couchdb_t must be allowed to sendto kernel unix dgram sockets", "security": false, "parent": false, "feedback": []}, {"bug_id": 1177717, "title": "couchdb selinux: gconf_home_t AVC", "security": false, "parent": false, "feedback": []}, {"bug_id": 1178562, "title": "SELinux is preventing /usr/lib/systemd/systemd-hostnamed from 'getattr' accesses on the file /proc/xen/capabilities.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1178730, "title": "SELinux is preventing Xorg.bin from 'getattr' accesses on the file /proc/<pid>/cmdline.", "security": false, "parent": false, "feedback": []}, {"bug_id": 1179488, "title": "SELinux is preventing docker from using the 'setsched' accesses on a process.", "security": false, "parent": false, "feedback": []}], "updateid": "FEDORA-2015-1337", "karma": 6, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}