{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 14, "unstable_karma": -2, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1396390", "type": "bugfix", "status": "obsolete", "request": null, "severity": "high", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-10-04 13:35:14", "date_modified": null, "date_approved": null, "date_testing": "2019-10-04 22:49:39", "date_stable": null, "alias": "FEDORA-2019-64732fd6a5", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-10-04 22:49:39", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2019-64732fd6a5", "title": "selinux-policy-3.14.4-36.fc31", "version_hash": "c01512a0a8c6e8b531bd6b37e73db12e51e74717", "release": {"name": "F31", "long_name": "Fedora 31", "version": "31", "id_prefix": "FEDORA", "branch": "f31", "dist_tag": "f31", "stable_tag": "f31-updates", "testing_tag": "f31-updates-testing", "candidate_tag": "f31-updates-candidate", "pending_signing_tag": "f31-signing-pending", "pending_testing_tag": "f31-updates-testing-pending", "pending_stable_tag": "f31-updates-pending", "override_tag": "f31-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by lvrabec. ", "timestamp": "2019-10-04 13:35:14", "update_id": 160778, "user_id": 91, "id": 1080133, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2019-10-04 13:35:14", "update_id": 160778, "user_id": 91, "id": 1080134, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2019-10-04 13:35:33", "update_id": 160778, "user_id": 91, "id": 1080135, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-10-04 22:51:42", "update_id": 160778, "user_id": 91, "id": 1081406, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "bug_feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 1, "comment_id": 1081827, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1081827, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'greenwave_failed'.", "timestamp": "2019-10-06 08:07:17", "update_id": 160778, "user_id": 91, "id": 1083286, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2019-10-06 13:50:44", "update_id": 160778, "user_id": 91, "id": 1083838, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "bug_feedback": [{"karma": 0, "comment_id": 1084570, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2019-10-06 18:09:10", "update_id": 160778, "user_id": 91, "id": 1084574, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "bug_feedback": [{"karma": 0, "comment_id": 1085133, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1085133, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 91, "id": 1085134, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "bug_feedback": [{"karma": 0, "comment_id": 1085142, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1085142, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 91, "id": 1085143, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "bug_feedback": [{"karma": 0, "comment_id": 1085144, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1085144, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}, {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "bug_feedback": [{"karma": 0, "comment_id": 1085724, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "bug_feedback": [{"karma": 0, "comment_id": 1085757, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}, {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "bug_feedback": [{"karma": 0, "comment_id": 1085758, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}, {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "bug_feedback": [{"karma": 0, "comment_id": 1086845, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1086845, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted.", "timestamp": "2019-10-08 09:06:35", "update_id": 160778, "user_id": 91, "id": 1086846, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "bug_feedback": [{"karma": 0, "comment_id": 1086847, "bug_id": 1701318, "bug": {"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1704251, "bug": {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1733542, "bug": {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1749375, "bug": {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1750428, "bug": {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1753240, "bug": {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1753598, "bug": {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1754245, "bug": {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1086847, "bug_id": 1754360, "bug": {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1755396, "bug": {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been obsoleted.", "timestamp": "2019-10-08 09:07:17", "update_id": 160778, "user_id": 91, "id": 1086848, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "selinux-policy-3.14.4-36.fc31", "signed": true, "release_id": 33, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1701318, "title": "Selinux kills apache", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1701318, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1701318, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1701318, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1701318, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1704251, "title": "sysadm_u cannot exec yum", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1704251, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1704251, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1704251, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1704251, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1733542, "title": "Incorrect context applied to /etc/sysconfig/iptables.save", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1733542, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1733542, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1733542, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1733542, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1749375, "title": "Selinux prevents setting timezone via timedatectl, prevents write to /etc/localtime", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1749375, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1749375, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1749375, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1749375, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1750428, "title": "Denied NetworkManager write to /var/tmp/dracut.*/systemd-cat while generating initrd image", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1750428, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1750428, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1750428, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1750428, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1753240, "title": "SELinux is preventing gmain from 'getattr' accesses on the file /run/sssd.pid.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1753240, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1753240, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1753240, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1753240, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1753598, "title": "SELinux is preventing bwrap from 'getattr' accesses on the file file.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1753598, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1753598, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1753598, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1753598, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1754245, "title": "SELinux is preventing (iwd) from 'setattr' accesses on the directory /var/lib/iwd.", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 1081827, "bug_id": 1754245, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1754245, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1754245, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1754245, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1754360, "title": "SELinux is preventing boltd from 'add_name' accesses on the directory boot_acl.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1754360, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1754360, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": -1, "comment_id": 1085133, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": -1, "comment_id": 1085142, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": -1, "comment_id": 1085144, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1754360, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": -1, "comment_id": 1086845, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": -1, "comment_id": 1086847, "bug_id": 1754360, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}]}, {"bug_id": 1755396, "title": "SELinux is preventing /usr/libexec/stratisd from 'getattr' accesses on the blk_file /dev/sdb1.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1081827, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 1, "text": "", "timestamp": "2019-10-05 08:58:43", "update_id": 160778, "user_id": 3974, "id": 1081827, "testcase_feedback": [], "user": {"name": "nyk", "email": "nkudriavtsev@gmail.com", "id": 3974, "avatar": "https://seccdn.libravatar.org/avatar/def969d2c435463076f81218e63c2b7d043bfdefbdc621f6aa847d550d559707?s=24&d=retro", "openid": "nyk.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1084570, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "+1", "timestamp": "2019-10-06 18:07:55", "update_id": 160778, "user_id": 506, "id": 1084570, "testcase_feedback": [], "user": {"name": "smithp", "email": "smithpeter835@yahoo.co.uk", "id": 506, "avatar": "https://seccdn.libravatar.org/avatar/cdf0e9eb825568e6173694f0d1788bd389a980b3497928ce6f44f889943928a5?s=24&d=retro", "openid": "smithp.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1085133, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:14:35", "update_id": 160778, "user_id": 827, "id": 1085133, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085142, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1758731", "timestamp": "2019-10-07 08:15:11", "update_id": 160778, "user_id": 827, "id": 1085142, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085144, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2019-10-07 08:15:27", "update_id": 160778, "user_id": 827, "id": 1085144, "testcase_feedback": [], "user": {"name": "praiskup", "email": "praiskup@redhat.com", "id": 827, "avatar": "https://seccdn.libravatar.org/avatar/16e1a710f35d917226ef12b6515ecc9743c03176e809752af95aeb1c36249008?s=24&d=retro", "openid": "praiskup.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1085724, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": -1, "text": "", "timestamp": "2019-10-07 15:36:33", "update_id": 160778, "user_id": 5159, "id": 1085724, "testcase_feedback": [], "user": {"name": "agarwalvarshit", "email": "ping2.varshitagarwal@gmail.com", "id": 5159, "avatar": "https://seccdn.libravatar.org/avatar/3939a9ed92a500505585372ba43e3df775a8a1655707f8689999ef8d0b5e127f?s=24&d=retro", "openid": "agarwalvarshit.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1085757, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1759019\nSELinux is preventing boltd from 'getattr' accesses on the lnk_file", "timestamp": "2019-10-07 16:14:54", "update_id": 160778, "user_id": 2559, "id": 1085757, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1085758, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "Sorry, I meant -1 of course", "timestamp": "2019-10-07 16:16:26", "update_id": 160778, "user_id": 2559, "id": 1085758, "testcase_feedback": [], "user": {"name": "proski", "email": "plroskin@gmail.com", "id": 2559, "avatar": "https://seccdn.libravatar.org/avatar/530ce01b46b052c872021f67a398d2f32dae176b7e2355af9457c327a0194087?s=24&d=retro", "openid": "proski.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitliveusb-creator"}]}}}, {"karma": 0, "comment_id": 1086845, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:06:34", "update_id": 160778, "user_id": 3505, "id": 1086845, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1086847, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": -1, "text": "Prevents boltd from actually working at all.", "timestamp": "2019-10-08 09:07:16", "update_id": 160778, "user_id": 3505, "id": 1086847, "testcase_feedback": [], "user": {"name": "gicmo", "email": "ckellner@redhat.com", "id": 3505, "avatar": "https://seccdn.libravatar.org/avatar/a6548a625ecbe971db303acddddf577cb6d5c5196f34eb79ef85daff42ee3cc2?s=24&d=retro", "openid": "gicmo.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "neuro-sig"}, {"name": "osbuild"}, {"name": "osbuild-sig"}]}}}, {"karma": 0, "comment_id": 1145006, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "This breaks gnome-software in [openQA testing](https://openqa.fedoraproject.org/tests/487677). Trying to install updates it just gets stuck at \"Software catalog is being downloaded\". The system journal shows quite a lot of AVCs, including ones for `flatpak_helper_t` which are probably the issue here:\n\n    [adamw@adam tmp]$ journalctl --file var/log/journal/574fce5929ad42c790052a6349619665/system.journal  | grep -i avc\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:35 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[32304]: AVC avc:  denied  { mac_admin } for  pid=32304 comm=\"restorecon\" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0\n    Nov 22 08:48:37 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[708]: USER_AVC pid=708 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2)\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[708]: USER_AVC pid=708 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for  scontext=system_u:system_r:policykit_t:s0 tcontext=system_u:system_r:flatpak_helper_t:s0 tclass=dbus permissive=0\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { signal } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { signal } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:43 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1]: AVC avc:  denied  { sigkill } for  pid=1 comm=\"systemd\" scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=0 trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:44 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[708]: USER_AVC pid=708 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for  scontext=system_u:system_r:policykit_t:s0 tcontext=system_u:system_r:flatpak_helper_t:s0 tclass=dbus permissive=0\n    Nov 22 08:48:45 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[708]: USER_AVC pid=708 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for  scontext=system_u:system_r:policykit_t:s0 tcontext=system_u:system_r:flatpak_helper_t:s0 tclass=dbus permissive=0\n    Nov 22 08:48:45 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[2461]: AVC avc:  denied  { read } for  pid=2461 comm=\"gdbus\" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_stream_socket permissive=0 srawcon=\"system_u:system_r:flatpak_helper_t:s0\" trawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:48:45 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[2461]: AVC avc:  denied  { search } for  pid=2461 comm=\"gdbus\" name=\"/\" dev=\"dm-0\" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=0 srawcon=\"system_u:system_r:flatpak_helper_t:s0\"\n    Nov 22 08:50:17 ibm-p8-kvm-03-guest-02.virt.pnr.lab.eng.rdu2.redhat.com audit[1944]: AVC avc:  denied  { execute } for  pid=1944 comm=\"(m-helper)\" name=\"flatpak-system-helper\" dev=\"dm-0\" ino=272205 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon=\"system_u:object_r:flatpak_helper_exec_t:s0\"", "timestamp": "2019-11-22 18:04:30", "update_id": 170804, "user_id": 302, "id": 1145006, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1145829, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works here, but with one -1 already, it should be fixed before it goes to stable.", "timestamp": "2019-11-23 11:02:43", "update_id": 170804, "user_id": 198, "id": 1145829, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1145859, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "There are multiple issues with this update - first it doesn't seem to install correctly:\n\n```\n  Running scriptlet: selinux-policy-targeted-3.14.4-42.fc31.noarch          2/4 \nConflicting name type transition rules\nBinary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1651\nFailed to generate binary\n/usr/sbin/semodule:  Failed!\n```\n\nAnd after rebooting the system, I'm locked out from logging in (both via GDM and TTY) until I reboot with `enforcing=0` since setroubleshoot complains about two mislabeled files:\n\n- /usr/lib/systemd/systemd default label should be init_exec_t\n- /etc/gdm/PreSession/Default default label should be bin_t\n\nAlso I'm wondering why this package isn't a critpath package ...", "timestamp": "2019-11-23 11:46:12", "update_id": 170804, "user_id": 388, "id": 1145859, "testcase_feedback": [], "user": {"name": "decathorpe", "email": "decathorpe@gmail.com", "id": 388, "avatar": "https://seccdn.libravatar.org/avatar/67f4ac6a6b20752d6c2ff1f21b29d10c6fcdd05a35ffccdca789fe670dfc3efb?s=24&d=retro", "openid": "decathorpe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}, {"name": "pantheon-sig"}]}}}, {"karma": 0, "comment_id": 1145860, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "Doesn't report \"SELinux is preventing 11-dhclient from add_name access on the directory chrony.servers.wlp3s0.\" any longer, but generates new trouble.\n\nhttps://bugzilla.redhat.com/show_bug.cgi?id=1770698#c29", "timestamp": "2019-11-23 11:48:05", "update_id": 170804, "user_id": 3203, "id": 1145860, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1145861, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "EDIT: Sorry, nevermind, it's a critpath package after all, the icon is just really small in the new bodhi interface.", "timestamp": "2019-11-23 11:48:48", "update_id": 170804, "user_id": 388, "id": 1145861, "testcase_feedback": [], "user": {"name": "decathorpe", "email": "decathorpe@gmail.com", "id": 388, "avatar": "https://seccdn.libravatar.org/avatar/67f4ac6a6b20752d6c2ff1f21b29d10c6fcdd05a35ffccdca789fe670dfc3efb?s=24&d=retro", "openid": "decathorpe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}, {"name": "pantheon-sig"}]}}}, {"karma": 0, "comment_id": 1146635, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "Not good at all! Broke system login with user accounts, root account and even emergency shell login.\nHad to add `selinux=0` as a kernel parameter at boot to get into my system.", "timestamp": "2019-11-24 10:28:55", "update_id": 170804, "user_id": 3312, "id": 1146635, "testcase_feedback": [], "user": {"name": "akors", "email": "fat.lobyte9@gmail.com", "id": 3312, "avatar": "https://seccdn.libravatar.org/avatar/10159d46dfce4ef30dfd5698277e149394448129f6c1b93f780a97f8cb71c6d4?s=24&d=retro", "openid": "akors.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1146742, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "Unable to add local policy modules with this version using semodule.  I end up getting\n\n    Conflicting name type transition rules\n    Binary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1786\n    Failed to generate binary\n    semodule:  Failed!\n\nerrors.  Downgrading to the previous version (3.14.4-40.fc31) allows me to add local policies", "timestamp": "2019-11-24 14:37:24", "update_id": 170804, "user_id": 2935, "id": 1146742, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1146806, "bug_id": 1755396, "comment": {"karma": -1, "karma_critpath": 0, "text": "During dnf update:\n  Upgrading        : rpm-plugin-selinux-4.15.1-1.fc31.x86_64                                                                                           11/142 \n  Upgrading        : selinux-policy-3.14.4-42.fc31.noarch                                                                                              12/142 \n  Running scriptlet: selinux-policy-3.14.4-42.fc31.noarch                                                                                              12/142 \n  Running scriptlet: selinux-policy-targeted-3.14.4-42.fc31.noarch                                                                                     13/142 \n  Upgrading        : selinux-policy-targeted-3.14.4-42.fc31.noarch                                                                                     13/142 \n  Running scriptlet: selinux-policy-targeted-3.14.4-42.fc31.noarch                                                                                     13/142 \nConflicting name type transition rules\nBinary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1786\nFailed to generate binary\n/usr/sbin/semodule:  Failed!\n", "timestamp": "2019-11-24 20:10:08", "update_id": 170804, "user_id": 1282, "id": 1146806, "testcase_feedback": [], "user": {"name": "chrismurphy", "email": "bugzilla@colorremedies.com", "id": 1282, "avatar": "https://seccdn.libravatar.org/avatar/60ccc1ef04fbb6c3fafa8ea15a48f2dae097cc40b8911a7f35eff45f4a527d52?s=24&d=retro", "openid": "chrismurphy.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "centosproject-email-aliases"}, {"name": "sig-hyperscale"}, {"name": "fi-apprentice"}, {"name": "gitlab-centos-sig-hyperscale"}, {"name": "ocp-cico-hyperscale"}, {"name": "common-issues-triage"}, {"name": "btrfs-sig"}]}}}, {"karma": 0, "comment_id": 1147361, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "Hi All, \nThank you for reports.  \nBoth policies mentioned in the report are not shipped by selinux-policy package, (containers-selinux and flatpak) but we're investigating the issue. \n\nThanks,\nLukas.", "timestamp": "2019-11-25 09:56:12", "update_id": 170804, "user_id": 848, "id": 1147361, "testcase_feedback": [], "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1147374, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "Workaround described here: \nhttps://bugzilla.redhat.com/show_bug.cgi?id=1776034#c5", "timestamp": "2019-11-25 10:06:41", "update_id": 170804, "user_id": 848, "id": 1147374, "testcase_feedback": [], "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1147525, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "> Workaround described here: https://bugzilla.redhat.com/show_bug.cgi?id=1776034#c5\n\nThere is also another workaround downgrade selinux-policcy to -41 + reinstall the package container-slienux https://bugzilla.redhat.com/show_bug.cgi?id=1776248#c5", "timestamp": "2019-11-25 14:15:43", "update_id": 170804, "user_id": 809, "id": 1147525, "testcase_feedback": [], "user": {"name": "lslebodn", "email": "lslebodn@redhat.com", "id": 809, "avatar": "https://seccdn.libravatar.org/avatar/8c6fcfe0eec099f1f01f5c237935bb5c97f2063a5c1068e57c5815e0bfecbf70?s=24&d=retro", "openid": "lslebodn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitsssd"}]}}}, {"karma": 0, "comment_id": 1147629, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "Seems to be more of an issue with container-selinux:\n\nhttps://github.com/containers/container-selinux/pull/84", "timestamp": "2019-11-25 14:57:40", "update_id": 170804, "user_id": 5290, "id": 1147629, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1147940, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "I doubt it - I don't even have container-selinux installed on my system.", "timestamp": "2019-11-25 22:06:33", "update_id": 170804, "user_id": 388, "id": 1147940, "testcase_feedback": [], "user": {"name": "decathorpe", "email": "decathorpe@gmail.com", "id": 388, "avatar": "https://seccdn.libravatar.org/avatar/67f4ac6a6b20752d6c2ff1f21b29d10c6fcdd05a35ffccdca789fe670dfc3efb?s=24&d=retro", "openid": "decathorpe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}, {"name": "pantheon-sig"}]}}}, {"karma": 0, "comment_id": 1148016, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "The openQA update tests are strictly limited to the update in question: we start from a disk image built by virt-install, update it from the stable update repository, then add a repository containing *only* packages from the update. The openQA test fails consistently when run on this update, but passes when run on other updates. So the problem is definitely caused by *this update*, not by anything else.", "timestamp": "2019-11-26 00:13:15", "update_id": 170804, "user_id": 302, "id": 1148016, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1149904, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@adamwill, would it be possible to run testsuite with scratch builds? (I could provide scratch builds)\n\nTHanks,\nLukas.", "timestamp": "2019-11-27 11:14:04", "update_id": 170804, "user_id": 848, "id": 1149904, "testcase_feedback": [], "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1150051, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@adamwill,\nSure this bodhi update caused issues in openQA tests.\nBut it does not mean that the real bug was in selinux-policy. It could just reveal bug in container-selinux.\n\nI rebuild the latest container-selinux from rawhide on f31[1]\nand I cannot reproduce BZ1776248 with selinux-policy-3.14.4-42.fc31.noarch + container-selinux-2:2.123.0-0.1.dev.git661a904.fc31.noarch\n\n[1] https://koji.fedoraproject.org/koji/taskinfo?taskID=39375295\n", "timestamp": "2019-11-27 13:20:21", "update_id": 170804, "user_id": 809, "id": 1150051, "testcase_feedback": [], "user": {"name": "lslebodn", "email": "lslebodn@redhat.com", "id": 809, "avatar": "https://seccdn.libravatar.org/avatar/8c6fcfe0eec099f1f01f5c237935bb5c97f2063a5c1068e57c5815e0bfecbf70?s=24&d=retro", "openid": "lslebodn.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "gitsssd"}]}}}, {"karma": 0, "comment_id": 1150308, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@lvrabec yes, I can test scratch builds. Just give me the link and I can fire it. @lslebodn , if you think this should be fixed by changing container-selinux, we need to confirm it with container-selinux devs and add a container-selinux build to this update...@dwalsh , ping on this?", "timestamp": "2019-11-27 16:32:14", "update_id": 170804, "user_id": 302, "id": 1150308, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1150324, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@adamwill, \nI worked with @dwalsh on fixes, so from my POV it's good to go, but let's wait for formal ack from @dwalsh. As @lslebodn proposed on IRC, this should be in group update selinux-policy + container-selinux package. *BUT* we need increase selinux-policy required in container-selinux package.", "timestamp": "2019-11-27 17:01:51", "update_id": 170804, "user_id": 848, "id": 1150324, "testcase_feedback": [], "user": {"name": "lvrabec", "email": "lvrabec@redhat.com", "id": 848, "avatar": "https://seccdn.libravatar.org/avatar/fc5620e4b2cb6ce528cc5b9c4576b4421a9c47f14eeb1e764130d848219d8048?s=24&d=retro", "openid": "lvrabec.id.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 1150325, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "I can confirm the updated container-selinux-2.123.0-1.fc31 package does not trigger an error any longer on either of my systems together with selinux-policy-3.14.4-42.fc31.", "timestamp": "2019-11-27 17:18:53", "update_id": 170804, "user_id": 5290, "id": 1150325, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1150331, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "so @dwalsh , could you update container-selinux to depend on a newer selinux-policy , and then we can add the new container-selinux build to *this* update and obsolete https://bodhi.fedoraproject.org/updates/FEDORA-2019-edc1551b22 ? thanks!", "timestamp": "2019-11-27 17:35:47", "update_id": 170804, "user_id": 302, "id": 1150331, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": -1, "comment_id": 1151865, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "In regard to BZ#1755396:\n\nPackage selinux-policy-3.14.4-42.fc31 works better - but the problem is _not_ gone with it. I now find the following in dmesg:\n\n[   23.565628] audit: type=1130 audit(1574968794.744:64): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-\ncryptsetup@luks\\x2dstratis\\x2dssd\\x2dvg comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\n[   23.574364] device-mapper: table: 253:11: cache: unknown target type\n[   23.574396] audit: type=1400 audit(1574968794.753:65): avc:  denied  { module_request } for  pid=1058 comm=\"stratisd\" kmod=\"dm-cache\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0\n[   23.575494] device-mapper: ioctl: error adding target to table\n[   23.632232] device-mapper: table: 253:11: cache: unknown target type\n[   23.632265] audit: type=1400 audit(1574968794.811:66): avc:  denied  { module_request } for  pid=1058 comm=\"stratisd\" kmod=\"dm-cache\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0\n[   23.633468] device-mapper: ioctl: error adding target to table\n[   23.637369] audit: type=1130 audit(1574968794.816:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-cryptsetup@luks\\x2dstratis\\x2dhdd\\x2dvg comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\n[   23.676220] device-mapper: table: 253:11: cache: unknown target type\n[   23.676252] audit: type=1400 audit(1574968794.855:68): avc:  denied  { module_request } for  pid=1058 comm=\"stratisd\" kmod=\"dm-cache\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0\n[   23.677704] device-mapper: ioctl: error adding target to table\n", "timestamp": "2019-11-28 19:28:11", "update_id": 170804, "user_id": 5258, "id": 1151865, "testcase_feedback": [], "user": {"name": "aanno", "email": "aannoaanno@gmail.com", "id": 5258, "avatar": "https://seccdn.libravatar.org/avatar/c17b2a2df70d43014bda266f788ad021298fc3522ed30a7837e853ab961219f7?s=24&d=retro", "openid": "aanno.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1153767, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "In regard to BZ#1755396, With the selinux warning browser, I see the following problems with selinux-policy-3.14.4-42.fc31:\n\n```bash\n* SELinux is preventing mount from 'read' accesses on the blk_file loop1.\nRaw Audit Messages\ntype=AVC msg=audit(1557599764.3:347): avc:  denied  { read } for  pid=5364 comm=\"mount\" name=\"loop1\" dev=\"devtmpfs\" ino=34913 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1\n\n* SELinux is preventing mount from 'open' accesses on the blk_file /dev/loop1.\nRaw Audit Messages\ntype=AVC msg=audit(1557599764.3:348): avc:  denied  { open } for  pid=5364 comm=\"mount\" path=\"/dev/loop1\" dev=\"devtmpfs\" ino=34913 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1\n\n* SELinux is preventing mount from 'ioctl' accesses on the blk_file /dev/loop1.\ntype=AVC msg=audit(1557599764.3:349): avc:  denied  { ioctl } for  pid=5364 comm=\"mount\" path=\"/dev/loop1\" dev=\"devtmpfs\" ino=34913 ioctlcmd=0x4c05 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1\n\n* SELinux is preventing mount from read, write access on the chr_file loop-control.\ntype=AVC msg=audit(1557599764.3:350): avc:  denied  { read write } for  pid=5364 comm=\"mount\" name=\"loop-control\" dev=\"devtmpfs\" ino=27710 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1\n\n* SELinux is preventing mount from 'open' accesses on the chr_file /dev/loop-control.\ntype=AVC msg=audit(1557599764.3:351): avc:  denied  { open } for  pid=5364 comm=\"mount\" path=\"/dev/loop-control\" dev=\"devtmpfs\" ino=27710 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1\n\n* SELinux is preventing mount from 'ioctl' accesses on the chr_file /dev/loop-control.\ntype=AVC msg=audit(1557599764.3:352): avc:  denied  { ioctl } for  pid=5364 comm=\"mount\" path=\"/dev/loop-control\" dev=\"devtmpfs\" ino=27710 ioctlcmd=0x4c82 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1\n\n* SELinux is preventing mount from 'write' accesses on the blk_file loop2.\ntype=AVC msg=audit(1557599764.4:353): avc:  denied  { write } for  pid=5364 comm=\"mount\" name=\"loop2\" dev=\"devtmpfs\" ino=67850 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1\n\n* SELinux is preventing systemd from 'create' accesses on the Verzeichnis recordings.\ntype=AVC msg=audit(1567538795.411:845): avc:  denied  { create } for  pid=1 comm=\"systemd\" name=\"recordings\" scontext=system_u:system_r:init_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=dir permissive=0\n\n* SELinux is preventing cp from using the 'setfscreate' accesses on a process.\ntype=AVC msg=audit(1569263071.507:365): avc:  denied  { setfscreate } for  pid=8657 comm=\"cp\" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=process permissive=1\n\n* Process stratisd tried to access system with module_request.\n* SELinux is preventing stratisd from 'execute' accesses on the Datei /usr/sbin/pdata_tools.\ntype=AVC msg=audit(1572608333.230:776): avc:  denied  { execute } for  pid=16969 comm=\"stratisd\" name=\"pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\n\n* SELinux is preventing stratisd from 'execute_no_trans' accesses on the Datei /usr/sbin/pdata_tools.\ntype=AVC msg=audit(1572608333.230:777): avc:  denied  { execute_no_trans } for  pid=16969 comm=\"stratisd\" path=\"/usr/sbin/pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\n\n* Process thin_check tried to access /usr/sbin/pdata_tools with map.\n* Process stratisd tried to write to directory /stratis\n* Process stratisd tried to access directory .mdv-093c... with add_name.\n* Process stratisd tried to access directory .mdv-093c... with create.\ntype=AVC msg=audit(1572695079.107:482): avc:  denied  { create } for  pid=6651 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\n\n* Process stratisd tried to access directory .mdv-093c... with mounton.\n* Process stratisd tried to access filesystem /.\ntype=AVC msg=audit(1572695079.135:484): avc:  denied  { mount } for  pid=6651 comm=\"stratisd\" name=\"/\" dev=\"dm-15\" ino=12992 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1\n\n* Process stratisd tried to access directory 'filesystems' with read.\ntype=AVC msg=audit(1572695079.136:486): avc:  denied  { read } for  pid=6651 comm=\"stratisd\" name=\"filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\n\n* Process stratisd tried to access directory 'filesystems' with open.\n* Process stratisd tried to access directory 'filesystems' with getattr.\n* Process stratisd tried to access filesystem with unmount.\ntype=AVC msg=audit(1572695079.136:489): avc:  denied  { unmount } for  pid=6651 comm=\"stratisd\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1\n\n* Process stratisd tried to access directory .mdv-093c... with remove_name.\n* Process stratisd tried to access directory .mdv-093c... with rmdir.\ntype=AVC msg=audit(1572695079.220:491): avc:  denied  { rmdir } for  pid=6651 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" dev=\"dm-4\" ino=134343861 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\n\n* Process stratisd tried to access directory 'filesystems' with search.\ntype=AVC msg=audit(1572695079.247:492): avc:  denied  { search } for  pid=6651 comm=\"stratisd\" name=\"filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\n\n* Process stratisd tried to access file 1715509...4d.json with read.\ntype=AVC msg=audit(1572695079.247:493): avc:  denied  { read } for  pid=6651 comm=\"stratisd\" name=\"17155095e2254fb0b020ec2ffa6a5e4d.json\" dev=\"dm-15\" ino=12996 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1\n\n* Process stratisd tried to access file 1715509...4d.json with open.\n* Process stratisd tried to access /mnt/opt with getattr.\ntype=AVC msg=audit(1572695079.338:495): avc:  denied  { getattr } for  pid=6651 comm=\"stratisd\" name=\"/\" dev=\"dm-17\" ino=2048 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1\n\n* Process stratisd tried to access lnk_file /stratis/stratis_hdd/opt with unlink.\ntype=AVC msg=audit(1572695079.339:496): avc:  denied  { unlink } for  pid=6651 comm=\"stratisd\" name=\"opt\" dev=\"dm-4\" ino=146941056 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=lnk_file permissive=1\n\n* Process stratisd tried to access lnk_file /opt with create.\ntype=AVC msg=audit(1572695079.339:497): avc:  denied  { create } for  pid=6651 comm=\"stratisd\" name=\"opt\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=lnk_file permissive=1\n\n* Process systemd tried to access capability2 with mac_admin.\ntype=AVC msg=audit(1575127332.448:120): avc:  denied  { mac_admin } for  pid=1 comm=\"systemd\" capability=33  scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=1\n\n* Process mandb tried to access directory /var/lib/snapd with search.\ntype=AVC msg=audit(1575127443.105:355): avc:  denied  { search } for  pid=5298 comm=\"mandb\" name=\"snapd\" dev=\"dm-4\" ino=134536464 scontext=system_u:system_r:mandb_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon=\"system_u:object_r:snappy_var_lib_t:s0\"\n```", "timestamp": "2019-11-30 15:58:06", "update_id": 170804, "user_id": 5258, "id": 1153767, "testcase_feedback": [], "user": {"name": "aanno", "email": "aannoaanno@gmail.com", "id": 5258, "avatar": "https://seccdn.libravatar.org/avatar/c17b2a2df70d43014bda266f788ad021298fc3522ed30a7837e853ab961219f7?s=24&d=retro", "openid": "aanno.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1160816, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "OK, so I updated container-selinux's dependency on selinux-policy and bumped the update. Hopefully everything should work now, except possibly @aanno 's bug, but unless the update makes it *worse*, that's not a reason to -1 it. Please let us know if anyone still sees things worse than the previous stable policy.", "timestamp": "2019-12-06 18:04:14", "update_id": 170804, "user_id": 302, "id": 1160816, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1160838, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@adamwill, thank you for your help, on my vms the update goes well with no errors reported and the system overall looks good.\nI am going to create another selinux-policy build soon for both f31 and f30 once this update and its f30 version get into stable repos as there are enough of new bugs which need to be addressed.\n\n@aanno, there are a lot of unlabeled_t types which can mislead in troubleshooting, please test this build and then run ausearch again to identify additional possible missing permissions.", "timestamp": "2019-12-06 18:37:58", "update_id": 170804, "user_id": 5290, "id": 1160838, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1160955, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "openQA updates all pass, so looks good to me too.", "timestamp": "2019-12-06 22:33:11", "update_id": 170804, "user_id": 302, "id": 1160955, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1161445, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "The upgrade to -43 still causes this scriptlet failure:\n\n```\n  Running scriptlet: selinux-policy-targeted-3.14.4-43.fc31.noarch                                                      2/4 \nConflicting name type transition rules\nBinary policy creation failed at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1651\nFailed to generate binary\n/usr/sbin/semodule:  Failed!\n```\n\nNote that I **don't have container-selinux installed on this system**.\n\nReinstalling this package with `sudo dnf reinstall selinux-policy-targeted` worked, rebooted the system, and don't get any AVC denials (so far) ... so I'm withholding judgement for now, because of the scriptlet failure", "timestamp": "2019-12-07 10:19:13", "update_id": 170804, "user_id": 388, "id": 1161445, "testcase_feedback": [], "user": {"name": "decathorpe", "email": "decathorpe@gmail.com", "id": 388, "avatar": "https://seccdn.libravatar.org/avatar/67f4ac6a6b20752d6c2ff1f21b29d10c6fcdd05a35ffccdca789fe670dfc3efb?s=24&d=retro", "openid": "decathorpe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}, {"name": "pantheon-sig"}]}}}, {"karma": -1, "comment_id": 1162100, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "Regarding BZ#1755396 I find the following in /var/log/message:\n\n```\nDec  8 16:42:49 blacksnapper audit[854]: AVC avc:  denied  { remove_name } for  pid=854 comm=\"stratisd\" name=\"home\" dev=\"dm-4\" ino=134774209 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:49 blacksnapper audit[854]: AVC avc:  denied  { unlink } for  pid=854 comm=\"stratisd\" name=\"home\" dev=\"dm-4\" ino=134774209 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=lnk_file permissive=1\nDec  8 16:42:49 blacksnapper audit[854]: AVC avc:  denied  { rmdir } for  pid=854 comm=\"stratisd\" name=\"stratis_hdd\" dev=\"dm-4\" ino=134774208 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\n\nDec  8 16:42:52 blacksnapper audit[854]: AVC avc:  denied  { module_request } for  pid=854 comm=\"stratisd\" kmod=\"dm-cache\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1\nDec  8 16:42:52 blacksnapper kernel: audit: type=1400 audit(1575819772.851:65): avc:  denied  { module_request } for  pid=854 comm=\"stratisd\" kmod=\"dm-cache\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1\n\nDec  8 16:42:52 blacksnapper audit[1435]: AVC avc:  denied  { execute } for  pid=1435 comm=\"stratisd\" name=\"pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper audit[1435]: AVC avc:  denied  { execute_no_trans } for  pid=1435 comm=\"stratisd\" path=\"/usr/sbin/pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper kernel: audit: type=1400 audit(1575819772.880:66): avc:  denied  { execute } for  pid=1435 comm=\"stratisd\" name=\"pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper kernel: audit: type=1400 audit(1575819772.880:66): avc:  denied  { execute_no_trans } for  pid=1435 comm=\"stratisd\" path=\"/usr/sbin/pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper kernel: audit: type=1400 audit(1575819772.880:66): avc:  denied  { map } for  pid=1435 comm=\"thin_check\" path=\"/usr/sbin/pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper audit[1435]: AVC avc:  denied  { map } for  pid=1435 comm=\"thin_check\" path=\"/usr/sbin/pdata_tools\" dev=\"dm-4\" ino=201329307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1\nDec  8 16:42:52 blacksnapper systemd[1]: Started Cryptography Setup for luks-stratis-hdd-vg.\nDec  8 16:42:52 blacksnapper audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-cryptsetup@luks\\x2dstratis\\x2dhdd\\x2dvg comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\nDec  8 16:42:52 blacksnapper kernel: audit: type=1130 audit(1575819772.900:67): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=systemd-cryptsetup@luks\\x2dstratis\\x2dhdd\\x2dvg comm=\"systemd\" exe=\"/usr/lib/systemd/systemd\" hostname=? addr=? terminal=? res=success'\nDec  8 16:42:52 blacksnapper audit[854]: AVC avc:  denied  { write } for  pid=854 comm=\"stratisd\" name=\"stratis\" dev=\"dm-4\" ino=2307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:52 blacksnapper audit[854]: AVC avc:  denied  { add_name } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper kernel: audit: type=1400 audit(1575819772.995:68): avc:  denied  { write } for  pid=854 comm=\"stratisd\" name=\"stratis\" dev=\"dm-4\" ino=2307 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper kernel: audit: type=1400 audit(1575819772.995:68): avc:  denied  { add_name } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Mounting V5 Filesystem\nDec  8 16:42:53 blacksnapper kernel: audit: type=1400 audit(1575819772.995:68): avc:  denied  { create } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { create } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { mounton } for  pid=854 comm=\"stratisd\" path=\"/stratis/.mdv-093c8d4221b846a2a7e85d35f458fa58\" dev=\"dm-4\" ino=20415 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\n\nDec  8 16:42:53 blacksnapper kernel: audit: type=1400 audit(1575819772.995:69): avc:  denied  { mounton } for  pid=854 comm=\"stratisd\" path=\"/stratis/.mdv-093c8d4221b846a2a7e85d35f458fa58\" dev=\"dm-4\" ino=20415 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Ending clean mount\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { mount } for  pid=854 comm=\"stratisd\" name=\"/\" dev=\"dm-15\" ino=12992 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { search } for  pid=854 comm=\"stratisd\" name=\"/\" dev=\"dm-15\" ino=12992 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { read } for  pid=854 comm=\"stratisd\" name=\"filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { open } for  pid=854 comm=\"stratisd\" path=\"/stratis/.mdv-093c8d4221b846a2a7e85d35f458fa58/filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { getattr } for  pid=854 comm=\"stratisd\" path=\"/stratis/.mdv-093c8d4221b846a2a7e85d35f458fa58/filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { unmount } for  pid=854 comm=\"stratisd\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1\nDec  8 16:42:53 blacksnapper systemd[1]: stratis-.mdv\\x2d093c8d4221b846a2a7e85d35f458fa58.mount: Succeeded.\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Unmounting Filesystem\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { remove_name } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" dev=\"dm-4\" ino=20415 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { rmdir } for  pid=854 comm=\"stratisd\" name=\".mdv-093c8d4221b846a2a7e85d35f458fa58\" dev=\"dm-4\" ino=20415 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Mounting V5 Filesystem\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Ending clean mount\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { search } for  pid=854 comm=\"stratisd\" name=\"filesystems\" dev=\"dm-15\" ino=12995 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { read } for  pid=854 comm=\"stratisd\" name=\"17155095e2254fb0b020ec2ffa6a5e4d.json\" dev=\"dm-15\" ino=12996 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { open } for  pid=854 comm=\"stratisd\" path=\"/stratis/.mdv-093c8d4221b846a2a7e85d35f458fa58/filesystems/17155095e2254fb0b020ec2ffa6a5e4d.json\" dev=\"dm-15\" ino=12996 scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1\nDec  8 16:42:53 blacksnapper systemd[1]: stratis-.mdv\\x2d093c8d4221b846a2a7e85d35f458fa58.mount: Succeeded.\nDec  8 16:42:53 blacksnapper kernel: XFS (dm-15): Unmounting Filesystem\nDec  8 16:42:53 blacksnapper stratisd[854]: INFO libstratis::engine::strat_engine::thinpool::thinpool: Data tier percent used: 13\nDec  8 16:42:53 blacksnapper audit[854]: AVC avc:  denied  { create } for  pid=854 comm=\"stratisd\" name=\"home\" scontext=system_u:system_r:stratisd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=lnk_file permissive=1\n\n```", "timestamp": "2019-12-08 15:53:52", "update_id": 170804, "user_id": 5258, "id": 1162100, "testcase_feedback": [], "user": {"name": "aanno", "email": "aannoaanno@gmail.com", "id": 5258, "avatar": "https://seccdn.libravatar.org/avatar/c17b2a2df70d43014bda266f788ad021298fc3522ed30a7837e853ab961219f7?s=24&d=retro", "openid": "aanno.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1162187, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "@decathorpe, did you have container-selinux installed at some point in the past? Please check if the module exists on the filesystem and try to remove it manually:\n\nls -la /var/lib/selinux/targeted/active/modules/200/container/\nsemodule -X200 -r container", "timestamp": "2019-12-08 21:37:58", "update_id": 170804, "user_id": 5290, "id": 1162187, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1162188, "bug_id": 1755396, "comment": {"karma": 0, "karma_critpath": 0, "text": "This is a formated version of the 2 commands:\n```\nls -la /var/lib/selinux/targeted/active/modules/200/container/\nsemodule -X200 -r container\n```", "timestamp": "2019-12-08 21:42:58", "update_id": 170804, "user_id": 5290, "id": 1162188, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1162189, "bug_id": 1755396, "comment": {"karma": 1, "karma_critpath": 0, "text": "@zpytela yes, I once had that package installed (I think it was pulled in by podman, but I removed that container stuff again). the directory was present, but \"semodule -X100 -r container\" removed it. downgrading and upgrading selinux-policy again now works without problems, thanks :)", "timestamp": "2019-12-08 21:44:24", "update_id": 170804, "user_id": 388, "id": 1162189, "testcase_feedback": [], "user": {"name": "decathorpe", "email": "decathorpe@gmail.com", "id": 388, "avatar": "https://seccdn.libravatar.org/avatar/67f4ac6a6b20752d6c2ff1f21b29d10c6fcdd05a35ffccdca789fe670dfc3efb?s=24&d=retro", "openid": "decathorpe.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}, {"name": "pantheon-sig"}]}}}]}], "updateid": "FEDORA-2019-64732fd6a5", "karma": -2, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}