FEDORA-2016-9d027c3768 — bugfix update for selinux-policy

obsolete

selinux-policy-3.13.1-225.fc25

FEDORA-2016-9d027c3768 created by lvrabec 6 years ago for Fedora 25

More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=821122

This update has been submitted for testing by lvrabec.

6 years ago

logic commented & provided feedback 6 years ago

karma

This seems to fix the postfix issues I was seeing.

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

BZ#1398007 postfix: no log entries for sent mails

BZ#1398437 SELinux is preventing 7370616D64206368696C64 from search access on the directory mail.

g6avk commented & provided feedback 6 years ago

karma

Works for me, fixes #1383867 on this box

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

anonymous commented & provided feedback 6 years ago

SELinux is preventing QSGRenderThread from execute access on the file XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX:

Additional Information:

Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023

Target Context system_u:object_r:xdm_var_lib_t:s0

Target Objects XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX [ file ]

Source QSGRenderThread

Source Path QSGRenderThread

Port <Unknown>

Policy RPM <Unknown>

Selinux Enabled True

Policy Type targeted

Enforcing Mode Enforcing

Platform Linux localhost 4.9.0-rc7 #1 SMP

                          Mon Nov 28 00:47:41 EET 2016 x86_64

Alert Count 82 First Seen 2016-10-29 23:02:51 EEST Last Seen 2016-11-30 16:41:12 EET Local ID 4f3dea13-f7a5-4872-9ea5-70a581d303c7

viorel commented & provided feedback 6 years ago

karma

LGTM

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

BZ#1398007 postfix: no log entries for sent mails

BZ#1398853 SELinux file context for /usr/lib/systemd/resolv.conf should be net_conf_t

adamwill commented & provided feedback 6 years ago

karma

yeah, seems to be fixing the mail denials for me.

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

BZ#1398437 SELinux is preventing 7370616D64206368696C64 from search access on the directory mail.

dhgutteridge commented & provided feedback 6 years ago

karma

This update prevents virtual machines using virt-manager from running. See #1400565. For me, that's a big -1.

This update has been pushed to testing.

6 years ago

filiperosset commented & provided feedback 6 years ago

karma

no regressions noted

cserpentis commented & provided feedback 6 years ago

karma

works for me

nathan95 commented & provided feedback 6 years ago

karma

works for me

renault commented & provided feedback 6 years ago

karma

Works well

anonymous commented & provided feedback 6 years ago

Breaks starting all local VMs with "SELinux denies access". Major regression. Please do not push to stable as is.

karma: -1

lupinix commented & provided feedback 6 years ago

karma

i can confirm the virtual machine issue :(

This update has been obsoleted by selinux-policy-3.13.1-225.1.fc25.

6 years ago

Please login to add feedback.

Metadata

Type

bugfix

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

selinux-policy-3.13.1-225.fc25

Settings

Unstable by Karma

-2

Stable by Karma

disabled

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

BZ#1371676 SELinux is preventing iw from 'write' accesses on the file /run/tlp/lock_tlp.

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

BZ#1397254 SELinux is preventing rpc.statd from 'write' accesses on the file /run/rpc.statd.lock.

BZ#1398007 postfix: no log entries for sent mails

BZ#1398078 SELinux is preventing pmsignal from using the 'signal' accesses on a process.

BZ#1398437 SELinux is preventing 7370616D64206368696C64 from search access on the directory mail.

BZ#1398853 SELinux file context for /usr/lib/systemd/resolv.conf should be net_conf_t

selinux-policy-3.13.1-225.fc25

Automated Test Results

None