How to install

sudo dnf upgrade --advisory=FEDORA-2017-9a20533d62

This update has been submitted for testing by lvrabec.

2 years ago
User Icon dhgutteridge commented & provided feedback 2 years ago
karma

No regressions noted.

User Icon anonymous commented & provided feedback 2 years ago

Much better than the previous version. But, with some { dac_read_search } AVC denials on 4.12-rc kernel:

audit: type=1400 audit(1494913535.134:600): avc:  denied  { dac_read_search } for  pid=1636 comm="abrt-dbus" capability=2  scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tclass=capability permissive=0

audit: type=1400 audit(1494918417.825:655): avc:  denied  { dac_read_search } for  pid=23690 comm="sendmail" capability=2  scontext=system_u:system_r:system_mail_t:s0 tcontext=system_u:system_r:system_mail_t:s0 tclass=capability permissive=0
User Icon anonymous commented & provided feedback 2 years ago

++

audit: type=1400 audit(1494889971.441:403): avc:  denied  { dac_read_search } for  pid=2483 comm="systemd-tmpfile" capability=2  scontext=system_u:system_r:systemd_tmpfiles_t:s0 tcontext=system_u:system_r:systemd_tmpfiles_t:s0 tclass=capability permissive=0

audit: type=1400 audit(1494894721.536:515): avc:  denied  { dac_read_search } for  pid=8828 comm="exim_tidydb" capability=2  scontext=system_u:system_r:system_mail_t:s0-s0:c0.c1023 tcontext=system_u:system_r:system_mail_t:s0-s0:c0.c1023 tclass=capability permissive=0

karma: +1

BZ#1427311 SELinux is preventing nvidia-installe from 'module_load' accesses on the system /tmp/NVIDIA-Linux-x86_64-375.39/kernel/nvidia.ko.

This update has been pushed to testing.

2 years ago
User Icon cserpentis commented & provided feedback 2 years ago
karma

works for me

User Icon dkaspar commented & provided feedback 2 years ago
karma

This update seems to fix my problems with AVC denials for TLP. ++

BZ#1410066 SELinux: Many AVC denials for TLP
BZ#1403964 SELinux is preventing ethtool from 'write' accesses on the file /run/tlp/lock_tlp.
User Icon bojan commented & provided feedback 2 years ago
karma

Everything still runs, so no regressions here on x86_64.

User Icon jayjayjazz commented & provided feedback 2 years ago
karma

Works fine on x86_64.

This update has been submitted for stable by bodhi.

2 years ago

This update has been pushed to stable.

2 years ago

Please login to add feedback.

Metadata
Type
enhancement
Karma
5
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-2
Stable by Karma
5
Dates
submitted
2 years ago
in testing
2 years ago
in stable
2 years ago
BZ#1403964 SELinux is preventing ethtool from 'write' accesses on the file /run/tlp/lock_tlp.
0
1
BZ#1406979 SELinux is preventing qemu-system-x86 from 'open' accesses on the file /proc/<pid>/cmdline.
0
0
BZ#1410066 SELinux: Many AVC denials for TLP
0
1
BZ#1427311 SELinux is preventing nvidia-installe from 'module_load' accesses on the system /tmp/NVIDIA-Linux-x86_64-375.39/kernel/nvidia.ko.
0
1
BZ#1427797 SELinux is preventing iscsid from 'module_load' accesses on the system Unknown.
0
0

Automated Test Results