FEDORA-2019-3055c546d6

bugfix update in Fedora 30 for selinux-policy

Status: stable 4 months ago

Comments 14

This update has been submitted for testing by lvrabec.

rngd - fixed haveged - fixed mongo-org - is not fixed, I've updated bug #1698743

karma: +1 #1698743: -1 #1699278: +1 #1699426: +1

rngd - fixed haveged - fixed

mongo-org - is not fixed, I've updated bug #1698743, there appears to be a new violation maybe previously hidden by the one in the original report

karma: +1 #1698743: -1 #1699278: +1 #1699426: +1

This update has been pushed to testing.

karma: +1 critpath: +1

Works here.

karma: +1 critpath: +1

No regressions found

karma: +1

This update has been submitted for batched by bodhi.

karma: +1 critpath: +1

work

karma: +1 critpath: +1

This update has been submitted for stable by bodhi.

I saw denials of ModemManager sending messages to fwupd through dbus when gnome and gnome-software were started as I reported in #1701791. Those denials first with showed up with 3.14.3-31. I'm unsure if they're related to the commit titled "Update system_dbus policy because of dbus-broker-20-2" or some change in ModemManager or gnome-software etc. Thanks for the fix upstream. The denial of rngd writing to write_wakeup_threshold in #1699278 was fixed in 3.14.3-29. I haven't seen other new denials with this update.

karma: +1 critpath: +1 #1699278: +1

This update has been pushed to stable.

Add Comment & Feedback

Please login to add feedback.

Content Type
RPM
Status
stable
Test Gating
Submitted by
Update Type
bugfix
Update Severity
medium
Karma
+7
stable threshold: 5
unstable threshold: -2
Autopush (karma)
Enabled
Autopush (time)
Disabled
Dates
submitted 4 months ago
in testing 4 months ago
in stable 4 months ago

Related Bugs 8

00 #1698219 SELinux Policy is preventing virtlogd.service from accessing it's config in /etc/libvirt/virtlogd.conf
-10 #1698743 Mongodb-org policy violation
0+2 #1699278 SELinux is preventing rngd from write access on the file write_wakeup_threshold
0+1 #1699426 SELinux violation - haveged
00 #1699459 SELinux is preventing modprobe from 'read' accesses on the file modules.alias.bin.
00 #1699532 SELinux is preventing abrt-install-cc from write access on the file core_pipe_limit
00 #1700245 SELinux denies iscsid { read } for modules.dep.bin and modules.softdep
00 #1700739 libvirtd has an error because tun module is not loaded

Automated Test Results