FEDORA-2018-914734bf04 created by gicmo 3 years ago for Fedora 28
obsolete

bolt 0.5 release

This update has been submitted for testing by gicmo.

3 years ago

This update has been pushed to testing.

3 years ago
User Icon bojan commented & provided feedback 3 years ago

New SELinux denials with this release:

module my-boltd 1.0;

require { type boltd_t; type syslogd_var_run_t; type var_run_t; class sock_file write; class dir { add_name create write }; }

============= boltd_t ==============

!!!! This avc is allowed in the current policy

allow boltd_t syslogd_var_run_t:sock_file write; allow boltd_t var_run_t:dir { add_name create write };

User Icon besser82 commented & provided feedback 3 years ago
karma

Works great! LGTM! =)

User Icon dhgutteridge commented & provided feedback 3 years ago

Like @bojan, I'm getting new SELinux denials:

type=AVC msg=audit(1537751347.682:227): avc:  denied  { create } for  pid=1617 comm="boltd" name="power" scontext=system_u:system_r:boltd_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
User Icon proski commented & provided feedback 3 years ago
karma

Bugs filed for SELinux denials: #1632354, #1632356, #1632357, #1632358

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

3 years ago
User Icon gicmo commented & provided feedback 3 years ago

Just for the reference, I did already file https://bugzilla.redhat.com/show_bug.cgi?id=1632230 for denials related to "/run/bolt/"

User Icon augenauf commented & provided feedback 3 years ago

same as @bojan and @dhgutteridge, causing SELInux denial.

User Icon cserpentis commented & provided feedback 3 years ago
karma

works for me, don't use boltd though

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

3 years ago
User Icon mhayden commented & provided feedback 3 years ago
karma

Seeing the same SELinux denials as the others have noted

User Icon robbinespu commented & provided feedback 3 years ago
karma

I don't have SELinux enable and it just worked for me.

User Icon alciregi commented & provided feedback 3 years ago
karma

WFM


Please login to add feedback.

Metadata
Type
bugfix
Karma
2
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-3
Stable by Karma
disabled
Stable by Time
disabled
Dates
submitted
3 years ago
in testing
3 years ago
BZ#1631751 bolt-0.5 is available
0
0

Automated Test Results