FEDORA-2016-b37e51176b — bugfix update for selinux-policy

stable

selinux-policy-3.13.1-191.12.fc24

FEDORA-2016-b37e51176b created by lvrabec 5 years ago for Fedora 24

More info: http://koji.fedoraproject.org/koji/buildinfo?buildID=792104

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2016-b37e51176b

This update has been submitted for testing by lvrabec.

5 years ago

sekidde commented & provided feedback 5 years ago

karma

This policy update works!

BZ#1306243

BZ#1323177

BZ#1339641

BZ#1367279

BZ#1367393

This update has been pushed to testing.

5 years ago

bojan commented & provided feedback 5 years ago

karma

Seems to work on x86_64 here.

mikhail provided feedback 5 years ago

karma

BZ#1367393

dhgutteridge commented & provided feedback 5 years ago

karma

No regressions noted.

keramidas commented & provided feedback 5 years ago

karma

No regressions noted

This update has been submitted for stable by bodhi.

5 years ago

em3rson commented & provided feedback 5 years ago

karma

works

lantw44 commented & provided feedback 5 years ago

karma

I cannot start virtual machines after installing this update.

$ virsh -c qemu:///system start <vm>
error: Failed to start domain <vm>
error: SELinux policy denies access.

Systemd journal:

audit: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { start } for auid=n/a uid=0 gid=0 cmdline="/usr/lib/systemd/systemd-machined" scontext=system_u:system_r:systemd_machined_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
systemd-machined: Failed to start machine scope: Access denied
libvirtd: SELinux policy denies access.

selinux-policy-3.13.1-191.10.fc24 doesn't have this problem.

dhgutteridge commented & provided feedback 5 years ago

@lantw44: I don't see this issue when running a virtual machine via Gnome Boxes -- I mention this in case it helps narrow possible problem areas down (but I'm out of my depth here).

dhgutteridge commented & provided feedback 5 years ago

karma

I can duplicate @lantw44's problem with virtual machines, in my case using virt-manager: it won't let me create a new VM, saying SELinux disallows this. And as with @lantw44, downgrading to selinux-policy-3.13.1-191.10.fc24 solves the problem. Reversing my earlier karma.

This update has been pushed to stable.

5 years ago

dhgutteridge commented & provided feedback 5 years ago

I couldn't find an existing bug for the virtualization blockage, so I've opened #1368745.