FEDORA-2018-0d8506aba4 — bugfix update for selinux-policy

stable

selinux-policy-3.13.1-283.21.fc27

FEDORA-2018-0d8506aba4 created by lvrabec 5 years ago for Fedora 27

More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1013233

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2018-0d8506aba4

This update has been submitted for testing by lvrabec.

5 years ago

This update has been pushed to testing.

5 years ago

lvrabec edited this update.

New build(s):

selinux-policy-3.13.1-283.21.fc27

Removed build(s):

selinux-policy-3.13.1-283.20.fc27

Karma has been reset.

5 years ago

This update has been submitted for testing by lvrabec.

5 years ago

anonymous commented & provided feedback 5 years ago

Fixes things for me. Thanks!

BZ#1474082 sandbox -X no longer working, SELinux violations

akostadi commented & provided feedback 5 years ago

karma

https://bugzilla.redhat.com/show_bug.cgi?id=1473954 is not fixed yet but this seems to be expected given it is not in the list.

BZ#1522724 SELinux is preventing pool from 'map' accesses on the file /media/NAS/archive/books/zemedelie/Zepp-2.djvu.

akostadi commented & provided feedback 5 years ago

karma

https://bugzilla.redhat.com/show_bug.cgi?id=1473954 is not fixed yet but this seems to be expected given it is not in the list.

BZ#1522724 SELinux is preventing pool from 'map' accesses on the file /media/NAS/archive/books/zemedelie/Zepp-2.djvu.

akostadi commented & provided feedback 5 years ago

karma

https://bugzilla.redhat.com/show_bug.cgi?id=1473954 is not fixed yet but this seems to be expected given it is not in the list.

BZ#1522724 SELinux is preventing pool from 'map' accesses on the file /media/NAS/archive/books/zemedelie/Zepp-2.djvu.

This update has been pushed to testing.

5 years ago

cserpentis commented & provided feedback 5 years ago

karma

works for me

filiperosset commented & provided feedback 5 years ago

karma

no regressions noted

renault commented & provided feedback 5 years ago

karma

No regressions found

tkrizek commented & provided feedback 5 years ago

UDP socket still can't be activated for port 53. Only TCP was fixed.

BZ#1366968 SELinux does not allow systemd to create a TCP/UDP socket on port 53 (DNS)

besser82 commented & provided feedback 5 years ago

karma

Works great! LGTM! =)

This update has been submitted for batched by bodhi.

5 years ago

This update has been submitted for stable by bodhi.

5 years ago

djuran commented & provided feedback 5 years ago

karma

Solves the squirrelbug issue

BZ#1528776 AVC denied when logging in to squirrelmail

djuran commented & provided feedback 5 years ago

karma

Solves the squirrelbug issue

BZ#1528776 AVC denied when logging in to squirrelmail

This update has been pushed to stable.

5 years ago

Please login to add feedback.

Metadata

Type

bugfix

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

selinux-policy-3.13.1-283.21.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

5 years ago

in testing

5 years ago

in stable

5 years ago

modified

5 years ago

BZ#1290876 SELinux prevents DSPAM to read its own data files when acting as a LDA

BZ#1304029 collectd plugins blocked by SELinux

BZ#1366968 SELinux does not allow systemd to create a TCP/UDP socket on port 53 (DNS)

-1

BZ#1474082 sandbox -X no longer working, SELinux violations

BZ#1501331

BZ#1506116 SELinux is preventing gnome-shell from using the 'getattr' accesses on a process.

BZ#1511685 SELinux is preventing totem-video-thu from 'map' accesses on the archivo /var/lib/flatpak/exports/share/mime/mime.cache.

BZ#1514284 Cannot start slapd

BZ#1515967 SELinux is preventing cinnamon from 'sendto' accesses on the unix_dgram_socket 006E7669646961316238323036663000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000.

BZ#1517393 SELinux is preventing gsf-office-thum from 'map' accesses on the fichier /tmp/gnome-desktop-file-to-thumbnail.doc.

BZ#1522672 httpd_passwd_t benign(?) AVC on /proc/1

BZ#1522724 SELinux is preventing pool from 'map' accesses on the file /media/NAS/archive/books/zemedelie/Zepp-2.djvu.

BZ#1523491 SELinux is preventing cgit from 'map' accesses on the file /home/lantw44/devel/ceiba-dl/.git/objects/4d/57576d649978075f8aa32c7a4ca48b8d0e33bb.

BZ#1527645 selinux block amanda from running

BZ#1528471 SELinux prevents munin updating its data files ('map' access in /var/lib/munin/)

BZ#1528776 AVC denied when logging in to squirrelmail

BZ#1529169 SELinux is preventing 706F737467726579202D2D756E6978 from map access on the file /var/spool/postfix/postgrey/__db.001

BZ#1529358 SELinux is preventing NetworkManager from 'read' accesses on the file resolv.conf.

BZ#1530018 SELinux is preventing smartd from 'read' accesses on the chr_file nvme0.

BZ#1530118 Coolkey module denied map causing segfault on x509 authentication

BZ#1530453 SELinux is preventing smbd from map access on the file /srv/tm/._chrissierra.sparsebundle

BZ#1530530 SELinux is preventing mkdir from 'write' accesses on the directory /root.

BZ#1530937 git_script_t cannot access git_user_content_t

selinux-policy-3.13.1-283.21.fc27

Automated Test Results

None