This update reverts a change from the -247 build - it made the tomcat_t domain confined, which broke FreeIPA. For now, as a quick fix, this build returns it to being unconfined.

How to install

sudo dnf upgrade --advisory=FEDORA-2017-f34640326f

This update has been submitted for testing by adamwill.

3 years ago

lvrabec edited this update.

3 years ago
User Icon dustymabe commented & provided feedback 3 years ago
karma

Tested on alpha 1.4 cloud image and on a custom built FAH with this new selinux-poicy in it.

[fedora@cloudhost ~]$ rpm -q selinux-policy 
selinux-policy-3.13.1-249.fc26.noarch
[fedora@cloudhost ~]$ sudo ausearch -m avc,user_avc
<no matches>
[fedora@cloudhost ~]$ systemd-analyze
Startup finished in 625ms (kernel) + 428ms (initrd) + 12.048s (userspace) = 13.102s
BZ#1435310 avc denial during F26 Atomic Host and Cloud Base boot - 'error_name=org.freedesktop.systemd1.NoSuchDynamicUser'

This update has been pushed to testing.

3 years ago

This update has been submitted for stable by adamwill.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata
Type
bugfix
Severity
urgent
Karma
1
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
3
Dates
submitted
3 years ago
in testing
3 years ago
in stable
3 years ago
modified
3 years ago
BZ#1435310 avc denial during F26 Atomic Host and Cloud Base boot - 'error_name=org.freedesktop.systemd1.NoSuchDynamicUser'
0
1
BZ#1436434 Multiple SELinux denials prevent FreeIPA server deployment on F26 and Rawhide
0
0

Automated Test Results