FEDORA-2018-ac82afe970 created by hadess 5 years ago for Fedora 28

This update fixes a number of bugs and warnings, and adds sandboxing as well as better support for devices with coarse battery levels.

This update has been submitted for testing by hadess.

5 years ago
SELinux is preventing (upowerd) from mounton access on the directory /var/lib/upower
SELinux is preventing (upowerd) from using the nnp_transition access on a process
SELinux is preventing upowerd from read access on the chr_file hiddev0

This update has been pushed to testing.

5 years ago
User Icon dhgutteridge commented & provided feedback 5 years ago

This update broke my laptop's suspension functionality on lid close. Instead of registering the lid close and suspending, it appears to have stopped even registering the event. I also started getting SELinux errors:

SELinux is preventing upowerd from open access on the chr_file /dev/input/event0.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that upowerd should be allowed open access on the event0 chr_file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
allow this access for now by executing:
# ausearch -c 'upowerd' --raw | audit2allow -M my-upowerd
# semodule -X 300 -i my-upowerd.pp

Additional Information:
Source Context                system_u:system_r:init_t:s0
Target Context                system_u:object_r:event_device_t:s0
Target Objects                /dev/input/event0 [ chr_file ]
Source                        upowerd
Source Path                   upowerd
Port                          <Unknown>
Host                          arcusxiii.nonus-porta.net
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.14.1-32.fc28.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     arcusxiii.nonus-porta.net
Platform                      Linux arcusxiii.nonus-porta.net
                            4.16.16-300.fc28.x86_64 #1 SMP Sun Jun 17 03:02:42
                            UTC 2018 x86_64 x86_64
Alert Count                   2
First Seen                    2018-06-20 20:00:50 EDT
Last Seen                     2018-06-20 20:54:28 EDT
Local ID                      6acfad06-8f3c-4ae2-90b4-7732a68f8f6f

Raw Audit Messages
type=AVC msg=audit(1529542468.403:234): avc:  denied  { open } for  pid=1540 comm="upowerd" path="/dev/input/event0" dev="devtmpfs" ino=13364 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:event_device_t:s0 tclass=chr_file permissive=0

Hash: upowerd,init_t,event_device_t,chr_file,open

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

5 years ago
User Icon bojan commented & provided feedback 5 years ago

Although my laptop (T450s) can suspend with it, there are a lot of new SELinux errors. So, definitely a regression.

User Icon augenauf commented & provided feedback 5 years ago

this package throws a bunch of SELinux errors on my T440s - I will have to provide negative karma.

This update has been obsoleted.

5 years ago

The issue with laptop lid suspension being broken has been reported as #1594479.

Please login to add feedback.

Content Type
Test Gating
Unstable by Karma
Stable by Karma
Stable by Time
5 years ago
in testing
5 years ago

Automated Test Results