FEDORA-2019-9da5c35472 — bugfix update for selinux-policy

stable

selinux-policy-3.14.3-39.fc30

FEDORA-2019-9da5c35472 created by lvrabec 6 years ago for Fedora 30

More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1289382

More info: https://koji.fedoraproject.org/koji/buildinfo?buildID=1273018

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2019-9da5c35472

This update has been submitted for testing by lvrabec.

6 years ago

This update test gating status has been changed to 'waiting'.

6 years ago

This update has obsoleted selinux-policy-3.14.3-38.fc30, and has inherited its bugs and notes.

6 years ago

This update test gating status has been changed to 'ignored'.

6 years ago

This update has been pushed to testing.

6 years ago

martinpitt commented & provided feedback 6 years ago

karma

I ran this against the cockpit integration tests, which covers a lot of APIs. Each test checks for new violations, too. I also confirmed that this now works with cockpit-tls. Thanks!

martinpitt commented & provided feedback 6 years ago

karma

I ran this against the cockpit integration tests, which covers a lot of APIs. Each test checks for new violations, too. I also confirmed that this now works with cockpit-tls. Thanks!

imabug provided feedback 6 years ago

karma

pwalter commented & provided feedback 6 years ago

karma

Works

pwalter commented & provided feedback 6 years ago

karma

Works

pwalter commented & provided feedback 6 years ago

karma

Works

sedrubal commented & provided feedback 6 years ago

karma

This finally fixes vnstat. Thanks.

This update has been submitted for stable by bodhi.

6 years ago

This update has been pushed to stable.

6 years ago

bluepencil commented & provided feedback 6 years ago

Firefox-69 (beta) constantly evokes SETroubleshoot messages:

SELinux is preventing rtkit-daemon from sys_ptrace access on the cap_userns labeled rtkit_daemon_t

bluepencil commented & provided feedback 6 years ago

Firefox-69 (beta) constantly evokes SETroubleshoot messages:

SELinux is preventing rtkit-daemon from sys_ptrace access on the cap_userns labeled rtkit_daemon_t

Please log in to add feedback.

Metadata

Type

bugfix

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-2

Stable by Karma

Stable by Time

disabled

Dates

submitted

6 years ago

in testing

6 years ago

in stable

6 years ago

Builds

selinux-policy-3.14.3-39.fc30

BZ#1711682 Allow systemd unit file flag ReadWritePaths=/var/lib/boinc

BZ#1711799 SELinux is preventing pgrep from 'getattr' accesses on various /proc/<pid> directories

BZ#1713885 SELinux is preventing pgrep from 'getattr' accesses on the directory /proc/<pid>.

BZ#1714406 SELinux is preventing pgrep from 'search' accesses on the directory 4571.

BZ#1714800 SELinux is preventing pmdalinux from 'read' accesses on the file mdadm.

BZ#1714823 cron job run daily that calls sa-update throws 100's of AVCs on pgrep

BZ#1715569 Can't use lmtp socket for delivering mail via fetchmail

BZ#1716937 SELinux prevents opendkim from executing /usr/bin/bash

BZ#1717405 firewalld fails to start in F30 (Silverblue): Failed to load nf_conntrack module

BZ#1718701 Policy blocks dhcpd from reading rndc.key

selinux-policy-3.14.3-39.fc30

Automated Test Results

ignored