FEDORA-2015-15798 — bugfix update for selinux-policy

stable

selinux-policy-3.13.1-128.13.fc22

FEDORA-2015-15798 created by lvrabec 8 years ago for Fedora 22

More info here: http://koji.fedoraproject.org/koji/buildinfo?buildID=684726

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-15798

This update has been submitted for testing by lvrabec.

8 years ago

This update has been pushed to testing.

8 years ago

mhayden commented & provided feedback 8 years ago

karma

Works fine.

dhgutteridge commented & provided feedback 8 years ago

karma

No issues encountered.

This update has been submitted for stable by bodhi.

8 years ago

seither commented & provided feedback 8 years ago

karma

This update gets rid of all the pidof AVCs from #1242578, but actually signalling the NetworkManager still fails:

type=AVC msg=audit(1442408036.812:839): avc:  denied  { signal } for  pid=15811 comm="dnssec-trigger-" scontext=system_u:system_r:dnssec_trigger_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=process permissive=1

BZ#1242578 Please allow dnssec-trigger to get pid of NetworkManager and send it SIGHUP signal

This update has been pushed to stable.

8 years ago

mooninite commented & provided feedback 8 years ago

karma

This update breaks the ability to reboot from gnome-shell and the command line.

Failed to start reboot.target: Access denied

Very poor testing performed if you guys are reporting "works fine".

Please login to add feedback.

Metadata

Type

bugfix

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

selinux-policy-3.13.1-128.13.fc22

Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

BZ#1242578 Please allow dnssec-trigger to get pid of NetworkManager and send it SIGHUP signal

-1

BZ#1255177 SELinux is preventing agetty from 'read' accesses on the file unix.

BZ#1255379 SELinux is preventing chrony-helper from 'getattr' accesses on the file /run/chrony-helper/added_servers.

BZ#1255944 SELinux is preventing chrony-helper from 'write' accesses on the file lock.

BZ#1255950 SELinux is preventing /usr/bin/cat from 'getattr' accesses on the file /run/chrony-helper/added_servers.

BZ#1256007 SELinux is preventing dhclient-script from 'execute' accesses on the file /usr/libexec/chrony-helper.

BZ#1256008 SELinux is preventing dhclient-script from 'getattr' accesses on the file /usr/libexec/chrony-helper.

BZ#1256127 SELinux is preventing /usr/libexec/pcp/bin/pmwebd from 'execute' accesses on the file /usr/bin/bash.

BZ#1256128 SELinux is preventing /usr/libexec/pcp/bin/pmwebd from 'read' accesses on the file meminfo.

selinux-policy-3.13.1-128.13.fc22

Automated Test Results

None