How to install

sudo dnf upgrade --advisory=FEDORA-2016-e3864b8972

This update has been submitted for testing by lvrabec.

3 years ago

This update has obsoleted selinux-policy-3.13.1-225.fc25, and has inherited its bugs and notes.

3 years ago
User Icon alexpl commented & provided feedback 3 years ago
karma

Fixed #1400565 for me, no regressions noted.

BZ#1400565 selinux-policy is preventing start of virtual machines
User Icon dhgutteridge commented & provided feedback 3 years ago
karma

Addresses #1400565 for me, no regressions noted.

BZ#1400565 selinux-policy is preventing start of virtual machines
User Icon georgm provided feedback 3 years ago
BZ#1400565 selinux-policy is preventing start of virtual machines
User Icon georgm provided feedback 3 years ago
karma
User Icon adamwill commented & provided feedback 3 years ago
karma

Seems fine here, addresses mail AVCs.

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.
BZ#1398007 postfix: no log entries for sent mails
BZ#1398437 SELinux is preventing 7370616D64206368696C64 from search access on the directory mail.
User Icon inode0 commented & provided feedback 3 years ago

I'm still seeing the same problems when attempting to start guests with virt-manager.

BZ#1400565 selinux-policy is preventing start of virtual machines
User Icon dhgutteridge commented & provided feedback 3 years ago

@inode0: it might help if you added any particulars about your setup to #1400565. This update definitely fixed the issue for me, so there must be something different about your environment.

This update has been pushed to testing.

3 years ago
User Icon pwalter commented & provided feedback 3 years ago
karma

Works

User Icon error commented & provided feedback 3 years ago
karma

Fixes postfix log problem.

BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.
BZ#1398007 postfix: no log entries for sent mails
User Icon inode0 commented & provided feedback 3 years ago

@dhgutteridge: My apologies. I thought I had updated to 225.1 but I had reinstalled 225 instead. I've updated to 22.5.1 now and everything is working fine. Sorry about the mistaken report.

BZ#1400565 selinux-policy is preventing start of virtual machines
User Icon plautrba commented & provided feedback 3 years ago
karma

Works for me.

BZ#1400565 selinux-policy is preventing start of virtual machines

This update has been submitted for stable by bodhi.

3 years ago
User Icon cserpentis commented & provided feedback 3 years ago
karma

works for me

User Icon evanberkum commented & provided feedback 3 years ago

I can confirm the following bugs have been fixed and I do have proper output in my journalctl for postfix again!

1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.

1398007 postfix: no log entries for sent mails

I have downloaded the files with koji-util ( package ) since it wasn't on the mirrors for me yet.

And did a local dnf update of my selinux-policy-3.13.1-225.1.fc25 and selinux-policy-targeted.3.13.1-225.1.fc25 rpm's

( I have to note, on my first try I had some problems, and my system wasn't able to boot properly after updating these packages! ( it hang on the targeted policies during ), I disabled selinux in /etc/selinux/config, rebooted again, booted up fine, did a rollback to the older packages, set it to Enforcing selinux again, rebooted ( causing a relabel since I set it to Enforcing ) updated the same packages again, rebooted and all was fine! ). Can't reproduce this again since my second try was fine.... the package fixes the problem.

User Icon evanberkum commented & provided feedback 3 years ago

With this update I still see problems with issue #1400565 when creating new VM!

BZ#1400565 selinux-policy is preventing start of virtual machines

This update has been pushed to stable.

3 years ago
User Icon dhgutteridge commented & provided feedback 3 years ago

@evanberkum: you should report any issues with creating a new VM as a new bug report. I was unable to duplicate that problem while testing the newer update FEDORA-2016-f24b3ddc6a.


Please login to add feedback.

Metadata
Type
bugfix
Karma
8
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-2
Stable by Karma
8
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago
BZ#1365435 Regression: SELinux prevents systemd from setting rlimits and breaks core dumping
0
0
BZ#1371676 SELinux is preventing iw from 'write' accesses on the file /run/tlp/lock_tlp.
0
0
BZ#1383867 SELinux is preventing pickup from 'read' accesses on the lnk_file log.
0
2
BZ#1389485 SELinux is preventing tgtd from using the 'wake_alarm' capabilities.
0
0
BZ#1397254 SELinux is preventing rpc.statd from 'write' accesses on the file /run/rpc.statd.lock.
0
0
BZ#1398007 postfix: no log entries for sent mails
0
2
BZ#1398078 SELinux is preventing pmsignal from using the 'signal' accesses on a process.
0
0
BZ#1398437 SELinux is preventing 7370616D64206368696C64 from search access on the directory mail.
0
1
BZ#1398853 SELinux file context for /usr/lib/systemd/resolv.conf should be net_conf_t
0
0
BZ#1400016 AVC starting systemd-networkd
0
0
BZ#1400023 AVC starting systemd-resolved
0
0
BZ#1400565 selinux-policy is preventing start of virtual machines
0
4

Automated Test Results