{"update": {"autokarma": true, "autotime": true, "stable_karma": 3, "stable_days": 14, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "New F32 selinux-policy build:\nhttps://koji.fedoraproject.org/koji/taskinfo?taskID=44115649\n\nThis update should address problems with the previous build that occasionally appeared on systems with custom selinux policy modules.", "type": "bugfix", "status": "stable", "request": null, "severity": "medium", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": true, "critpath_groups": null, "close_bugs": true, "date_submitted": "2020-05-05 11:34:12", "date_modified": null, "date_approved": null, "date_testing": null, "date_stable": "2020-05-06 04:29:08", "alias": "FEDORA-2020-a6cd8de2ed", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2020-05-06 04:29:08", "meets_testing_requirements": true, "url": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed", "title": "selinux-policy-3.14.5-38.fc32", "version_hash": "8f8dec54218daaeb1acf17d3a7cc5d025fa59935", "release": {"name": "F32", "long_name": "Fedora 32", "version": "32", "id_prefix": "FEDORA", "branch": "f32", "dist_tag": "f32", "stable_tag": "f32-updates", "testing_tag": "f32-updates-testing", "candidate_tag": "f32-updates-candidate", "pending_signing_tag": "f32-signing-pending", "pending_testing_tag": "f32-updates-testing-pending", "pending_stable_tag": "f32-updates-pending", "override_tag": "f32-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by zpytela. ", "timestamp": "2020-05-05 11:34:12", "update_id": 204516, "user_id": 91, "id": 1357028, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2020-05-05 11:34:13", "update_id": 204516, "user_id": 91, "id": 1357029, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2020-05-05 11:34:30", "update_id": 204516, "user_id": 91, "id": 1357030, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "I've only encountered BZ#1811407 and this is resolved with the update", "timestamp": "2020-05-05 12:12:05", "update_id": 204516, "user_id": 212, "id": 1357052, "bug_feedback": [{"karma": 1, "comment_id": 1357052, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357052, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357052, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "Same as egreshko", "timestamp": "2020-05-05 13:42:09", "update_id": 204516, "user_id": 367, "id": 1357155, "bug_feedback": [{"karma": 1, "comment_id": 1357155, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357155, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357155, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-05 16:28:40", "update_id": 204516, "user_id": 2935, "id": 1357902, "bug_feedback": [{"karma": 1, "comment_id": 1357902, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357902, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1357902, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by bodhi. ", "timestamp": "2020-05-05 16:28:40", "update_id": 204516, "user_id": 91, "id": 1357903, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2020-05-06 04:30:31", "update_id": 204516, "user_id": 91, "id": 1359112, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "All is well. No denials on two machines and relabelling worked on both too.", "timestamp": "2020-05-06 10:08:45", "update_id": 204516, "user_id": 198, "id": 1359500, "bug_feedback": [{"karma": 0, "comment_id": 1359500, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359500, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359500, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Please note the selinux policy needs to be rebuilt as a part of the update process so this selinux-policy package update can take a few minutes to complete the rpm scriptlets.", "timestamp": "2020-05-06 14:01:10", "update_id": 204516, "user_id": 5290, "id": 1359693, "bug_feedback": [{"karma": 0, "comment_id": 1359693, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359693, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359693, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works for me. Confirmed by two reboots. Scriptlet with restorecon was running 7 minutes! ", "timestamp": "2020-05-06 14:53:00", "update_id": 204516, "user_id": 1169, "id": 1359715, "bug_feedback": [{"karma": 0, "comment_id": 1359715, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359715, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1359715, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update does not resolve Fedora#1824196 for me.  Also, you can see Fedora#1827466 in there as well.\n```\n~]# ausearch -m avc -ts boot\n----\ntime->Wed May  6 17:57:42 2020\ntype=AVC msg=audit(1588805862.874:118): avc:  denied  { read } for  pid=815 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=256 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:163): avc:  denied  { read } for  pid=925 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:164): avc:  denied  { open } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:165): avc:  denied  { getattr } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```\nI've tried relabeling then rebooting -- no dice.", "timestamp": "2020-05-06 23:05:34", "update_id": 204516, "user_id": 911, "id": 1360333, "bug_feedback": [{"karma": 0, "comment_id": 1360333, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1360333, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": -1, "comment_id": 1360333, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@amessina, you are right: the first one missed the build, the second one has not been addressed yet.", "timestamp": "2020-05-07 06:29:10", "update_id": 204516, "user_id": 5290, "id": 1360846, "bug_feedback": [{"karma": 0, "comment_id": 1360846, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1360846, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1360846, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@zpytela, thank you.  My comment above was a reference that I am still seeing Fedora#1824196 even after the update to \nselinux-policy-3.14.5-38.fc32.  It seems like after a reboot, the files are not relabeled in time.  After I can login, I run a resstorecon -RFv on /sys/firmware/ and I see the files get relabeled, but that's too late as these errors are generated.\n\nAfter initrd, I see\n\nsystemd[1]: Successfully loaded SELinux policy in 410.073ms.\nsystemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.904ms.\n\nShould /sys/firmware/efi be listed there as well?", "timestamp": "2020-05-07 23:27:55", "update_id": 204516, "user_id": 911, "id": 1361704, "bug_feedback": [{"karma": 0, "comment_id": 1361704, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1361704, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1361704, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Works fine since <b>3.14.5-37.fc32</b>. No AVC after reboot.", "timestamp": "2020-05-08 18:39:42", "update_id": 204516, "user_id": 3867, "id": 1362700, "bug_feedback": [{"karma": 1, "comment_id": 1362700, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1362700, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1362700, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}, {"karma": 0, "karma_critpath": 0, "text": "@amessina, #1824196 dropped out of the latest build, will be a part of the next one.", "timestamp": "2020-05-11 16:40:28", "update_id": 204516, "user_id": 5290, "id": 1366389, "bug_feedback": [{"karma": 0, "comment_id": 1366389, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1366389, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1366389, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}, {"karma": 0, "karma_critpath": 0, "text": "Please note update to this package version can lead to relabeling the complete filesystem.\n\nThe reason is that this update brings file context specification for \"/s?bin/arping\". Unfortunately, a quantifier so early in the path is replaced with the '*' wildcard, i. e. in this case \"/*\" is to be relabeled.\n", "timestamp": "2020-05-11 16:48:27", "update_id": 204516, "user_id": 5290, "id": 1366395, "bug_feedback": [{"karma": 0, "comment_id": 1366395, "bug_id": 1811407, "bug": {"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1366395, "bug_id": 1824087, "bug": {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false}}, {"karma": 0, "comment_id": 1366395, "bug_id": 1824196, "bug": {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}], "builds": [{"nvr": "selinux-policy-3.14.5-38.fc32", "signed": true, "release_id": 35, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1811407, "title": "SELinux is preventing accounts-daemon from 'sys_nice' accesses", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 1349068, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the issues I've seen.", "timestamp": "2020-04-29 10:04:54", "update_id": 203248, "user_id": 212, "id": 1349068, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1350074, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update doesn't seem to resolve Fedora#1824196 (and some others) -- all denial AVCs on an F32 system since boot.\n\n```\nAVC avc:  denied  { read } for  pid=619 comm=\"systemd-modules\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { read } for  pid=812 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=15787 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\nAVC avc:  denied  { read } for  pid=933 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```", "timestamp": "2020-04-29 22:29:26", "update_id": 203248, "user_id": 911, "id": 1350074, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1350181, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Solves the accounts-daemon sys_nice problem.\nMachine is not EFI so can't comment on BZ#1824196", "timestamp": "2020-04-29 23:18:23", "update_id": 203248, "user_id": 1855, "id": 1350181, "testcase_feedback": [], "user": {"name": "jonathans", "email": "bugzilla_acct_1959@yahoo.com", "id": 1855, "avatar": "https://seccdn.libravatar.org/avatar/be11a66f21043caddb7c48ec8203501453d92b830c9dd3a6de440f38b3fc8308?s=24&d=retro", "openid": "jonathans.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1350748, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you're right, the patch got stuck halfway. Will be fixed in the next package build, sorry for that.", "timestamp": "2020-04-30 08:19:15", "update_id": 203248, "user_id": 5290, "id": 1350748, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 1350807, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine.\n\n#1823162 - Indeed no more AVC after upgrade to boinc-client-7.16.6-3.fc32.x86_64.rpm", "timestamp": "2020-04-30 08:54:42", "update_id": 203248, "user_id": 3867, "id": 1350807, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1355435, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "As neither of the problems appear on a default installation, more information is needed to help with resolving the issues. What changes on the system? What additional possibly clashing packages were installed? What exactly is on the screen or in audit logs?\n\nThese commands can give a hint:\n\nrpm -qa \"*selinux*\"\nsemanage export\nausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\n\nAdditional steps to enable full auditing in audit daemon:\n1) Open /etc/audit/rules.d/audit.rules file in an editor.\n2) Remove following line if it exists:\n-a task,never\n3) Add following line at the end of the file:\n-w /etc/shadow -p w\n4) Restart the audit daemon:\n   # service auditd restart\n5) Re-run the scenario - install, update, start a service; since this point, full auditing is enabled\n6) Collect AVC denials:\n  # ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\nThe steps will persist reboot.\n", "timestamp": "2020-05-04 06:33:09", "update_id": 203248, "user_id": 5290, "id": 1355435, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350958, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "New denials related to flatpak helper and tpm abrmd. Relabeling also complaining about types related to both of those not existing. Not giving karma.", "timestamp": "2020-04-30 10:54:02", "update_id": 203248, "user_id": 198, "id": 1350958, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350961, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Auto relabelling broke the whole thing. No boot.", "timestamp": "2020-04-30 11:01:13", "update_id": 203248, "user_id": 198, "id": 1350961, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350995, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "I have problems! During dnf-installation, scriptlet selinux-policy-targeted hangs up with \"restore\" process. I have to kill the \"restore\" process so that dnf runs through.", "timestamp": "2020-04-30 11:46:19", "update_id": 203248, "user_id": 1169, "id": 1350995, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 1351011, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Reverting to 32 and relabelling brought boot back in enforcing mode. 37 definitely broken here.", "timestamp": "2020-04-30 12:09:50", "update_id": 203248, "user_id": 198, "id": 1351011, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351013, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "@zpytela: Reproduction is pretty straightforward. Touch /.autorelabel. Reboot. Broken laptop.", "timestamp": "2020-04-30 12:15:40", "update_id": 203248, "user_id": 198, "id": 1351013, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351034, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2020-04-30 12:39:22", "update_id": 203248, "user_id": 3203, "id": 1351034, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351038, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Installation of the package(s) hangs and freeze the system ... hard to \"hard shutdown\" by pressing the power button.", "timestamp": "2020-04-30 12:42:20", "update_id": 203248, "user_id": 3203, "id": 1351038, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351045, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "I cannot reproduce neither of the issues reported, so it depends on package set installed or on customizations made to the system. More information is required to resolve these issues, please consider opening bugzillas.", "timestamp": "2020-04-30 12:46:44", "update_id": 203248, "user_id": 5290, "id": 1351045, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351071, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "Done -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407", "timestamp": "2020-04-30 13:02:35", "update_id": 203248, "user_id": 3203, "id": 1351071, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351416, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Warning : Please do not apply this update if you don't have a current system backup !  \nRead what happens on -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407#c44", "timestamp": "2020-04-30 16:18:07", "update_id": 203248, "user_id": 3203, "id": 1351416, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351881, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Bug #1830157 (not boot after relabelling on T450s).", "timestamp": "2020-04-30 23:21:15", "update_id": 203248, "user_id": 198, "id": 1351881, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1352700, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "Since multiple people have reported serious problems with this, I've unpushed it to ensure no-one else hits those problems till we know what's going on.", "timestamp": "2020-05-01 17:40:33", "update_id": 203248, "user_id": 302, "id": 1352700, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1354601, "bug_id": 1811407, "comment": {"karma": -1, "karma_critpath": 0, "text": "Horribly broken.\nUnable to login after relabelling.", "timestamp": "2020-05-03 09:18:05", "update_id": 203248, "user_id": 4832, "id": 1354601, "testcase_feedback": [], "user": {"name": "mscheiff", "email": "michael.scheiffler@pdts.at", "id": 4832, "avatar": "https://seccdn.libravatar.org/avatar/6887a37da98e6d7c657bf29b3a5d4f6db64fcb40fbcb0f11d7150459a5294ec7?s=24&d=retro", "openid": "mscheiff.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1350991, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "@bojan, flatpak has its own policy, please open a bugzilla on the flatpak component.\nRegarding tpm abrmd, open a bz on selinux-policy.\nIn both cases share the reproducing steps and the results, I cannot see any issue on my vms.", "timestamp": "2020-04-30 11:42:38", "update_id": 203248, "user_id": 5290, "id": 1350991, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1357034, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "A new build is on the way:\nhttps://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed", "timestamp": "2020-05-05 11:36:22", "update_id": 203248, "user_id": 5290, "id": 1357034, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 1, "comment_id": 1357052, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've only encountered BZ#1811407 and this is resolved with the update", "timestamp": "2020-05-05 12:12:05", "update_id": 204516, "user_id": 212, "id": 1357052, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 1357155, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Same as egreshko", "timestamp": "2020-05-05 13:42:09", "update_id": 204516, "user_id": 367, "id": 1357155, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1357902, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-05 16:28:40", "update_id": 204516, "user_id": 2935, "id": 1357902, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1357997, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed solved the problems having been reported.  \nAlthough the scripts needed more than five minutes to complete, no error was reported.  \nAfter rebooting the system, no SELinux alerts appeared, so this version seems to be okay.", "timestamp": "2020-05-05 17:16:05", "update_id": 203248, "user_id": 3203, "id": 1357997, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1359500, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "All is well. No denials on two machines and relabelling worked on both too.", "timestamp": "2020-05-06 10:08:45", "update_id": 204516, "user_id": 198, "id": 1359500, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359693, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note the selinux policy needs to be rebuilt as a part of the update process so this selinux-policy package update can take a few minutes to complete the rpm scriptlets.", "timestamp": "2020-05-06 14:01:10", "update_id": 204516, "user_id": 5290, "id": 1359693, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359715, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me. Confirmed by two reboots. Scriptlet with restorecon was running 7 minutes! ", "timestamp": "2020-05-06 14:53:00", "update_id": 204516, "user_id": 1169, "id": 1359715, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 1360333, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update does not resolve Fedora#1824196 for me.  Also, you can see Fedora#1827466 in there as well.\n```\n~]# ausearch -m avc -ts boot\n----\ntime->Wed May  6 17:57:42 2020\ntype=AVC msg=audit(1588805862.874:118): avc:  denied  { read } for  pid=815 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=256 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:163): avc:  denied  { read } for  pid=925 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:164): avc:  denied  { open } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:165): avc:  denied  { getattr } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```\nI've tried relabeling then rebooting -- no dice.", "timestamp": "2020-05-06 23:05:34", "update_id": 204516, "user_id": 911, "id": 1360333, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1360846, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you are right: the first one missed the build, the second one has not been addressed yet.", "timestamp": "2020-05-07 06:29:10", "update_id": 204516, "user_id": 5290, "id": 1360846, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1361704, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "@zpytela, thank you.  My comment above was a reference that I am still seeing Fedora#1824196 even after the update to \nselinux-policy-3.14.5-38.fc32.  It seems like after a reboot, the files are not relabeled in time.  After I can login, I run a resstorecon -RFv on /sys/firmware/ and I see the files get relabeled, but that's too late as these errors are generated.\n\nAfter initrd, I see\n\nsystemd[1]: Successfully loaded SELinux policy in 410.073ms.\nsystemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.904ms.\n\nShould /sys/firmware/efi be listed there as well?", "timestamp": "2020-05-07 23:27:55", "update_id": 204516, "user_id": 911, "id": 1361704, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 1, "comment_id": 1362700, "bug_id": 1811407, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine since <b>3.14.5-37.fc32</b>. No AVC after reboot.", "timestamp": "2020-05-08 18:39:42", "update_id": 204516, "user_id": 3867, "id": 1362700, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1366389, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, #1824196 dropped out of the latest build, will be a part of the next one.", "timestamp": "2020-05-11 16:40:28", "update_id": 204516, "user_id": 5290, "id": 1366389, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1366395, "bug_id": 1811407, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note update to this package version can lead to relabeling the complete filesystem.\n\nThe reason is that this update brings file context specification for \"/s?bin/arping\". Unfortunately, a quantifier so early in the path is replaced with the '*' wildcard, i. e. in this case \"/*\" is to be relabeled.\n", "timestamp": "2020-05-11 16:48:27", "update_id": 204516, "user_id": 5290, "id": 1366395, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 1824087, "title": "SELinux is preventing (sd-worker) from 'sendto' accesses on the unix_dgram_socket /run/systemd/journal/socket.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1349068, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the issues I've seen.", "timestamp": "2020-04-29 10:04:54", "update_id": 203248, "user_id": 212, "id": 1349068, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1350074, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update doesn't seem to resolve Fedora#1824196 (and some others) -- all denial AVCs on an F32 system since boot.\n\n```\nAVC avc:  denied  { read } for  pid=619 comm=\"systemd-modules\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { read } for  pid=812 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=15787 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\nAVC avc:  denied  { read } for  pid=933 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```", "timestamp": "2020-04-29 22:29:26", "update_id": 203248, "user_id": 911, "id": 1350074, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1350181, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Solves the accounts-daemon sys_nice problem.\nMachine is not EFI so can't comment on BZ#1824196", "timestamp": "2020-04-29 23:18:23", "update_id": 203248, "user_id": 1855, "id": 1350181, "testcase_feedback": [], "user": {"name": "jonathans", "email": "bugzilla_acct_1959@yahoo.com", "id": 1855, "avatar": "https://seccdn.libravatar.org/avatar/be11a66f21043caddb7c48ec8203501453d92b830c9dd3a6de440f38b3fc8308?s=24&d=retro", "openid": "jonathans.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1350748, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you're right, the patch got stuck halfway. Will be fixed in the next package build, sorry for that.", "timestamp": "2020-04-30 08:19:15", "update_id": 203248, "user_id": 5290, "id": 1350748, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350807, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine.\n\n#1823162 - Indeed no more AVC after upgrade to boinc-client-7.16.6-3.fc32.x86_64.rpm", "timestamp": "2020-04-30 08:54:42", "update_id": 203248, "user_id": 3867, "id": 1350807, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1355435, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "As neither of the problems appear on a default installation, more information is needed to help with resolving the issues. What changes on the system? What additional possibly clashing packages were installed? What exactly is on the screen or in audit logs?\n\nThese commands can give a hint:\n\nrpm -qa \"*selinux*\"\nsemanage export\nausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\n\nAdditional steps to enable full auditing in audit daemon:\n1) Open /etc/audit/rules.d/audit.rules file in an editor.\n2) Remove following line if it exists:\n-a task,never\n3) Add following line at the end of the file:\n-w /etc/shadow -p w\n4) Restart the audit daemon:\n   # service auditd restart\n5) Re-run the scenario - install, update, start a service; since this point, full auditing is enabled\n6) Collect AVC denials:\n  # ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\nThe steps will persist reboot.\n", "timestamp": "2020-05-04 06:33:09", "update_id": 203248, "user_id": 5290, "id": 1355435, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350958, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "New denials related to flatpak helper and tpm abrmd. Relabeling also complaining about types related to both of those not existing. Not giving karma.", "timestamp": "2020-04-30 10:54:02", "update_id": 203248, "user_id": 198, "id": 1350958, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350961, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Auto relabelling broke the whole thing. No boot.", "timestamp": "2020-04-30 11:01:13", "update_id": 203248, "user_id": 198, "id": 1350961, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350995, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "I have problems! During dnf-installation, scriptlet selinux-policy-targeted hangs up with \"restore\" process. I have to kill the \"restore\" process so that dnf runs through.", "timestamp": "2020-04-30 11:46:19", "update_id": 203248, "user_id": 1169, "id": 1350995, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 1351011, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Reverting to 32 and relabelling brought boot back in enforcing mode. 37 definitely broken here.", "timestamp": "2020-04-30 12:09:50", "update_id": 203248, "user_id": 198, "id": 1351011, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351013, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "@zpytela: Reproduction is pretty straightforward. Touch /.autorelabel. Reboot. Broken laptop.", "timestamp": "2020-04-30 12:15:40", "update_id": 203248, "user_id": 198, "id": 1351013, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351034, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2020-04-30 12:39:22", "update_id": 203248, "user_id": 3203, "id": 1351034, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351038, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Installation of the package(s) hangs and freeze the system ... hard to \"hard shutdown\" by pressing the power button.", "timestamp": "2020-04-30 12:42:20", "update_id": 203248, "user_id": 3203, "id": 1351038, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351045, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "I cannot reproduce neither of the issues reported, so it depends on package set installed or on customizations made to the system. More information is required to resolve these issues, please consider opening bugzillas.", "timestamp": "2020-04-30 12:46:44", "update_id": 203248, "user_id": 5290, "id": 1351045, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351071, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "Done -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407", "timestamp": "2020-04-30 13:02:35", "update_id": 203248, "user_id": 3203, "id": 1351071, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351416, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Warning : Please do not apply this update if you don't have a current system backup !  \nRead what happens on -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407#c44", "timestamp": "2020-04-30 16:18:07", "update_id": 203248, "user_id": 3203, "id": 1351416, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351881, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Bug #1830157 (not boot after relabelling on T450s).", "timestamp": "2020-04-30 23:21:15", "update_id": 203248, "user_id": 198, "id": 1351881, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1352700, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "Since multiple people have reported serious problems with this, I've unpushed it to ensure no-one else hits those problems till we know what's going on.", "timestamp": "2020-05-01 17:40:33", "update_id": 203248, "user_id": 302, "id": 1352700, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1354601, "bug_id": 1824087, "comment": {"karma": -1, "karma_critpath": 0, "text": "Horribly broken.\nUnable to login after relabelling.", "timestamp": "2020-05-03 09:18:05", "update_id": 203248, "user_id": 4832, "id": 1354601, "testcase_feedback": [], "user": {"name": "mscheiff", "email": "michael.scheiffler@pdts.at", "id": 4832, "avatar": "https://seccdn.libravatar.org/avatar/6887a37da98e6d7c657bf29b3a5d4f6db64fcb40fbcb0f11d7150459a5294ec7?s=24&d=retro", "openid": "mscheiff.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1350991, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "@bojan, flatpak has its own policy, please open a bugzilla on the flatpak component.\nRegarding tpm abrmd, open a bz on selinux-policy.\nIn both cases share the reproducing steps and the results, I cannot see any issue on my vms.", "timestamp": "2020-04-30 11:42:38", "update_id": 203248, "user_id": 5290, "id": 1350991, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1357034, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "A new build is on the way:\nhttps://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed", "timestamp": "2020-05-05 11:36:22", "update_id": 203248, "user_id": 5290, "id": 1357034, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1357052, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've only encountered BZ#1811407 and this is resolved with the update", "timestamp": "2020-05-05 12:12:05", "update_id": 204516, "user_id": 212, "id": 1357052, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1357155, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Same as egreshko", "timestamp": "2020-05-05 13:42:09", "update_id": 204516, "user_id": 367, "id": 1357155, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1357902, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-05 16:28:40", "update_id": 204516, "user_id": 2935, "id": 1357902, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1357997, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed solved the problems having been reported.  \nAlthough the scripts needed more than five minutes to complete, no error was reported.  \nAfter rebooting the system, no SELinux alerts appeared, so this version seems to be okay.", "timestamp": "2020-05-05 17:16:05", "update_id": 203248, "user_id": 3203, "id": 1357997, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1359500, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "All is well. No denials on two machines and relabelling worked on both too.", "timestamp": "2020-05-06 10:08:45", "update_id": 204516, "user_id": 198, "id": 1359500, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359693, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note the selinux policy needs to be rebuilt as a part of the update process so this selinux-policy package update can take a few minutes to complete the rpm scriptlets.", "timestamp": "2020-05-06 14:01:10", "update_id": 204516, "user_id": 5290, "id": 1359693, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359715, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me. Confirmed by two reboots. Scriptlet with restorecon was running 7 minutes! ", "timestamp": "2020-05-06 14:53:00", "update_id": 204516, "user_id": 1169, "id": 1359715, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 1360333, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update does not resolve Fedora#1824196 for me.  Also, you can see Fedora#1827466 in there as well.\n```\n~]# ausearch -m avc -ts boot\n----\ntime->Wed May  6 17:57:42 2020\ntype=AVC msg=audit(1588805862.874:118): avc:  denied  { read } for  pid=815 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=256 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:163): avc:  denied  { read } for  pid=925 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:164): avc:  denied  { open } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:165): avc:  denied  { getattr } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```\nI've tried relabeling then rebooting -- no dice.", "timestamp": "2020-05-06 23:05:34", "update_id": 204516, "user_id": 911, "id": 1360333, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1360846, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you are right: the first one missed the build, the second one has not been addressed yet.", "timestamp": "2020-05-07 06:29:10", "update_id": 204516, "user_id": 5290, "id": 1360846, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1361704, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "@zpytela, thank you.  My comment above was a reference that I am still seeing Fedora#1824196 even after the update to \nselinux-policy-3.14.5-38.fc32.  It seems like after a reboot, the files are not relabeled in time.  After I can login, I run a resstorecon -RFv on /sys/firmware/ and I see the files get relabeled, but that's too late as these errors are generated.\n\nAfter initrd, I see\n\nsystemd[1]: Successfully loaded SELinux policy in 410.073ms.\nsystemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.904ms.\n\nShould /sys/firmware/efi be listed there as well?", "timestamp": "2020-05-07 23:27:55", "update_id": 204516, "user_id": 911, "id": 1361704, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1362700, "bug_id": 1824087, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine since <b>3.14.5-37.fc32</b>. No AVC after reboot.", "timestamp": "2020-05-08 18:39:42", "update_id": 204516, "user_id": 3867, "id": 1362700, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1366389, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, #1824196 dropped out of the latest build, will be a part of the next one.", "timestamp": "2020-05-11 16:40:28", "update_id": 204516, "user_id": 5290, "id": 1366389, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1366395, "bug_id": 1824087, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note update to this package version can lead to relabeling the complete filesystem.\n\nThe reason is that this update brings file context specification for \"/s?bin/arping\". Unfortunately, a quantifier so early in the path is replaced with the '*' wildcard, i. e. in this case \"/*\" is to be relabeled.\n", "timestamp": "2020-05-11 16:48:27", "update_id": 204516, "user_id": 5290, "id": 1366395, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}]}, {"bug_id": 1824196, "title": "SELinux is preventing /usr/lib/systemd/systemd-resolved from 'read' accesses on the file /sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 1349068, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Fixes the issues I've seen.", "timestamp": "2020-04-29 10:04:54", "update_id": 203248, "user_id": 212, "id": 1349068, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": -1, "comment_id": 1350074, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update doesn't seem to resolve Fedora#1824196 (and some others) -- all denial AVCs on an F32 system since boot.\n\n```\nAVC avc:  denied  { read } for  pid=619 comm=\"systemd-modules\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=619 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { read } for  pid=812 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=15787 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\nAVC avc:  denied  { read } for  pid=933 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=933 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15770 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```", "timestamp": "2020-04-29 22:29:26", "update_id": 203248, "user_id": 911, "id": 1350074, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1350181, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Solves the accounts-daemon sys_nice problem.\nMachine is not EFI so can't comment on BZ#1824196", "timestamp": "2020-04-29 23:18:23", "update_id": 203248, "user_id": 1855, "id": 1350181, "testcase_feedback": [], "user": {"name": "jonathans", "email": "bugzilla_acct_1959@yahoo.com", "id": 1855, "avatar": "https://seccdn.libravatar.org/avatar/be11a66f21043caddb7c48ec8203501453d92b830c9dd3a6de440f38b3fc8308?s=24&d=retro", "openid": "jonathans.id.fedoraproject.org", "groups": [{"name": "ipausers"}]}}}, {"karma": 0, "comment_id": 1350748, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you're right, the patch got stuck halfway. Will be fixed in the next package build, sorry for that.", "timestamp": "2020-04-30 08:19:15", "update_id": 203248, "user_id": 5290, "id": 1350748, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350807, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine.\n\n#1823162 - Indeed no more AVC after upgrade to boinc-client-7.16.6-3.fc32.x86_64.rpm", "timestamp": "2020-04-30 08:54:42", "update_id": 203248, "user_id": 3867, "id": 1350807, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1350958, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "New denials related to flatpak helper and tpm abrmd. Relabeling also complaining about types related to both of those not existing. Not giving karma.", "timestamp": "2020-04-30 10:54:02", "update_id": 203248, "user_id": 198, "id": 1350958, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350961, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Auto relabelling broke the whole thing. No boot.", "timestamp": "2020-04-30 11:01:13", "update_id": 203248, "user_id": 198, "id": 1350961, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1350995, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "I have problems! During dnf-installation, scriptlet selinux-policy-targeted hangs up with \"restore\" process. I have to kill the \"restore\" process so that dnf runs through.", "timestamp": "2020-04-30 11:46:19", "update_id": 203248, "user_id": 1169, "id": 1350995, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": 0, "comment_id": 1351011, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Reverting to 32 and relabelling brought boot back in enforcing mode. 37 definitely broken here.", "timestamp": "2020-04-30 12:09:50", "update_id": 203248, "user_id": 198, "id": 1351011, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351013, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "@zpytela: Reproduction is pretty straightforward. Touch /.autorelabel. Reboot. Broken laptop.", "timestamp": "2020-04-30 12:15:40", "update_id": 203248, "user_id": 198, "id": 1351013, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351034, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "", "timestamp": "2020-04-30 12:39:22", "update_id": 203248, "user_id": 3203, "id": 1351034, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351038, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Installation of the package(s) hangs and freeze the system ... hard to \"hard shutdown\" by pressing the power button.", "timestamp": "2020-04-30 12:42:20", "update_id": 203248, "user_id": 3203, "id": 1351038, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351045, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "I cannot reproduce neither of the issues reported, so it depends on package set installed or on customizations made to the system. More information is required to resolve these issues, please consider opening bugzillas.", "timestamp": "2020-04-30 12:46:44", "update_id": 203248, "user_id": 5290, "id": 1351045, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1351071, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Done -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407", "timestamp": "2020-04-30 13:02:35", "update_id": 203248, "user_id": 3203, "id": 1351071, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351416, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Warning : Please do not apply this update if you don't have a current system backup !  \nRead what happens on -> https://bugzilla.redhat.com/show_bug.cgi?id=1811407#c44", "timestamp": "2020-04-30 16:18:07", "update_id": 203248, "user_id": 3203, "id": 1351416, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1351881, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Bug #1830157 (not boot after relabelling on T450s).", "timestamp": "2020-04-30 23:21:15", "update_id": 203248, "user_id": 198, "id": 1351881, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1352700, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Since multiple people have reported serious problems with this, I've unpushed it to ensure no-one else hits those problems till we know what's going on.", "timestamp": "2020-05-01 17:40:33", "update_id": 203248, "user_id": 302, "id": 1352700, "testcase_feedback": [], "user": {"name": "adamwill", "email": "awilliam@redhat.com", "id": 302, "avatar": "https://seccdn.libravatar.org/avatar/51720fbb2ec5dfd2bc005ac374a3bfd3190cb8f45f3bb8d6bdf35fb6a051d03b?s=24&d=retro", "openid": "adamwill.id.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "qa-tools-sig"}, {"name": "fedora-contributor"}, {"name": "news"}, {"name": "gittriage"}, {"name": "sysadmin"}, {"name": "gitspin-kickstarts"}, {"name": "signed_fpca"}, {"name": "gitgeneric-release"}, {"name": "yak_farmers"}, {"name": "triagers"}, {"name": "qa"}, {"name": "sysadmin-qa"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitmkinitrd"}, {"name": "qa-admin"}, {"name": "aws-qa"}, {"name": "change-wranglers"}, {"name": "fedora-ci-admins"}, {"name": "common-issues-triage"}, {"name": "sysadmin-main"}, {"name": "program-management"}, {"name": "gitfedora-project-schedule"}]}}}, {"karma": 0, "comment_id": 1354601, "bug_id": 1824196, "comment": {"karma": -1, "karma_critpath": 0, "text": "Horribly broken.\nUnable to login after relabelling.", "timestamp": "2020-05-03 09:18:05", "update_id": 203248, "user_id": 4832, "id": 1354601, "testcase_feedback": [], "user": {"name": "mscheiff", "email": "michael.scheiffler@pdts.at", "id": 4832, "avatar": "https://seccdn.libravatar.org/avatar/6887a37da98e6d7c657bf29b3a5d4f6db64fcb40fbcb0f11d7150459a5294ec7?s=24&d=retro", "openid": "mscheiff.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1350991, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@bojan, flatpak has its own policy, please open a bugzilla on the flatpak component.\nRegarding tpm abrmd, open a bz on selinux-policy.\nIn both cases share the reproducing steps and the results, I cannot see any issue on my vms.", "timestamp": "2020-04-30 11:42:38", "update_id": 203248, "user_id": 5290, "id": 1350991, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1355435, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "As neither of the problems appear on a default installation, more information is needed to help with resolving the issues. What changes on the system? What additional possibly clashing packages were installed? What exactly is on the screen or in audit logs?\n\nThese commands can give a hint:\n\nrpm -qa \"*selinux*\"\nsemanage export\nausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\n\nAdditional steps to enable full auditing in audit daemon:\n1) Open /etc/audit/rules.d/audit.rules file in an editor.\n2) Remove following line if it exists:\n-a task,never\n3) Add following line at the end of the file:\n-w /etc/shadow -p w\n4) Restart the audit daemon:\n   # service auditd restart\n5) Re-run the scenario - install, update, start a service; since this point, full auditing is enabled\n6) Collect AVC denials:\n  # ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts today\nThe steps will persist reboot.\n", "timestamp": "2020-05-04 06:33:09", "update_id": 203248, "user_id": 5290, "id": 1355435, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1357034, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "A new build is on the way:\nhttps://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed", "timestamp": "2020-05-05 11:36:22", "update_id": 203248, "user_id": 5290, "id": 1357034, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1357052, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "I've only encountered BZ#1811407 and this is resolved with the update", "timestamp": "2020-05-05 12:12:05", "update_id": 204516, "user_id": 212, "id": 1357052, "testcase_feedback": [], "user": {"name": "egreshko", "email": "Ed.Greshko@greshko.com", "id": 212, "avatar": "https://seccdn.libravatar.org/avatar/c229c01a8e9bdd7321461af5deb7c45cf9720ef1620ab61019270e91f9bcff40?s=24&d=retro", "openid": "egreshko.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1357155, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Same as egreshko", "timestamp": "2020-05-05 13:42:09", "update_id": 204516, "user_id": 367, "id": 1357155, "testcase_feedback": [], "user": {"name": "alexpl", "email": "alex.ploumistos@gmail.com", "id": 367, "avatar": "https://seccdn.libravatar.org/avatar/c8ef98b832fe2240130a04ceeec5757c5d3289ad74d259eda7b5c784822c6327?s=24&d=retro", "openid": "alexpl.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "scitech_sig"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1357902, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-05 16:28:40", "update_id": 204516, "user_id": 2935, "id": 1357902, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1357997, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "https://bodhi.fedoraproject.org/updates/FEDORA-2020-a6cd8de2ed solved the problems having been reported.  \nAlthough the scripts needed more than five minutes to complete, no error was reported.  \nAfter rebooting the system, no SELinux alerts appeared, so this version seems to be okay.", "timestamp": "2020-05-05 17:16:05", "update_id": 203248, "user_id": 3203, "id": 1357997, "testcase_feedback": [], "user": {"name": "clnetbox", "email": "clnetbox@gmail.com", "id": 3203, "avatar": "https://seccdn.libravatar.org/avatar/913f92af0cfa71f159e0616e532fc98057c543f88bad34247bcf4b0824c20993?s=24&d=retro", "openid": "clnetbox.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1359500, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "All is well. No denials on two machines and relabelling worked on both too.", "timestamp": "2020-05-06 10:08:45", "update_id": 204516, "user_id": 198, "id": 1359500, "testcase_feedback": [], "user": {"name": "bojan", "email": "bojan@rexursive.com", "id": 198, "avatar": "https://seccdn.libravatar.org/avatar/adb4c3f28bd6969871988f992b1bf71e404f03e3570fbfa0fc9bd7d0bf0003f8?s=24&d=retro", "openid": "bojan.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359693, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note the selinux policy needs to be rebuilt as a part of the update process so this selinux-policy package update can take a few minutes to complete the rpm scriptlets.", "timestamp": "2020-05-06 14:01:10", "update_id": 204516, "user_id": 5290, "id": 1359693, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1359715, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me. Confirmed by two reboots. Scriptlet with restorecon was running 7 minutes! ", "timestamp": "2020-05-06 14:53:00", "update_id": 204516, "user_id": 1169, "id": 1359715, "testcase_feedback": [], "user": {"name": "dirkk", "email": "dirk@math.upb.de", "id": 1169, "avatar": "https://seccdn.libravatar.org/avatar/66100548491a56e147e3f45fdb716e9d000662d7e51049166d4a0253b6dec036?s=24&d=retro", "openid": "dirkk.id.fedoraproject.org", "groups": [{"name": ""}]}}}, {"karma": -1, "comment_id": 1360333, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "This update does not resolve Fedora#1824196 for me.  Also, you can see Fedora#1827466 in there as well.\n```\n~]# ausearch -m avc -ts boot\n----\ntime->Wed May  6 17:57:42 2020\ntype=AVC msg=audit(1588805862.874:118): avc:  denied  { read } for  pid=815 comm=\"sssd\" name=\"systemd\" dev=\"tmpfs\" ino=256 scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:163): avc:  denied  { read } for  pid=925 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:164): avc:  denied  { open } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Wed May  6 17:57:44 2020\ntype=AVC msg=audit(1588805864.772:165): avc:  denied  { getattr } for  pid=925 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=239 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```\nI've tried relabeling then rebooting -- no dice.", "timestamp": "2020-05-06 23:05:34", "update_id": 204516, "user_id": 911, "id": 1360333, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1360846, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you are right: the first one missed the build, the second one has not been addressed yet.", "timestamp": "2020-05-07 06:29:10", "update_id": 204516, "user_id": 5290, "id": 1360846, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1361704, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@zpytela, thank you.  My comment above was a reference that I am still seeing Fedora#1824196 even after the update to \nselinux-policy-3.14.5-38.fc32.  It seems like after a reboot, the files are not relabeled in time.  After I can login, I run a resstorecon -RFv on /sys/firmware/ and I see the files get relabeled, but that's too late as these errors are generated.\n\nAfter initrd, I see\n\nsystemd[1]: Successfully loaded SELinux policy in 410.073ms.\nsystemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 20.904ms.\n\nShould /sys/firmware/efi be listed there as well?", "timestamp": "2020-05-07 23:27:55", "update_id": 204516, "user_id": 911, "id": 1361704, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1362700, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works fine since <b>3.14.5-37.fc32</b>. No AVC after reboot.", "timestamp": "2020-05-08 18:39:42", "update_id": 204516, "user_id": 3867, "id": 1362700, "testcase_feedback": [], "user": {"name": "nicosss", "email": "nberrehouc@free.fr", "id": 3867, "avatar": "https://seccdn.libravatar.org/avatar/6b2080df28ea79f4a25e62c5c32be7cf28eb72586d14872d20e88e34ada59108?s=24&d=retro", "openid": "nicosss.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1366389, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, #1824196 dropped out of the latest build, will be a part of the next one.", "timestamp": "2020-05-11 16:40:28", "update_id": 204516, "user_id": 5290, "id": 1366389, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1366395, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note update to this package version can lead to relabeling the complete filesystem.\n\nThe reason is that this update brings file context specification for \"/s?bin/arping\". Unfortunately, a quantifier so early in the path is replaced with the '*' wildcard, i. e. in this case \"/*\" is to be relabeled.\n", "timestamp": "2020-05-11 16:48:27", "update_id": 204516, "user_id": 5290, "id": 1366395, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1378196, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Please note updating from the previous package version selinux-policy-3.14.5-38.fc32 will have all filesystems relabeling as a result which cannot be prevented. If relabeling takes a lot of time, consider unmounting some filesystems, updating manually, postponing the update to later.\n\nUpdating from older versions of the package should not trigger the relabeling.", "timestamp": "2020-05-20 11:57:03", "update_id": 207839, "user_id": 5290, "id": 1378196, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1378983, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-20 23:01:14", "update_id": 207839, "user_id": 2935, "id": 1378983, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": -1, "comment_id": 1380554, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Installed `selinux-policy-targeted-3.14.5-39.fc32.noarch`, relabeled entire system, rebooted...\n```\ntime->Thu May 21 19:37:49 2020\ntype=AVC msg=audit(1590107869.700:161): avc:  denied  { read } for  pid=937 comm=\"systemd-resolve\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15758 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Thu May 21 19:37:49 2020\ntype=AVC msg=audit(1590107869.700:162): avc:  denied  { open } for  pid=937 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15758 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n----\ntime->Thu May 21 19:37:49 2020\ntype=AVC msg=audit(1590107869.700:163): avc:  denied  { getattr } for  pid=937 comm=\"systemd-resolve\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=15758 scontext=system_u:system_r:systemd_resolved_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n\n```\n\nAfter a full reboot...\n```\n~]# ll -Z /sys/firmware/\ntotal 0\ndrwxr-xr-x.  6 root root system_u:object_r:sysfs_t:s0 0 May 21 19:57 acpi\ndrwxr-xr-x.  4 root root system_u:object_r:sysfs_t:s0 0 May 21 19:57 dmi\ndrwxr-xr-x.  5 root root system_u:object_r:sysfs_t:s0 0 May 21 19:57 efi\ndrwxr-xr-x. 23 root root system_u:object_r:sysfs_t:s0 0 May 21 19:58 memmap\n```\n\n```\n~]# restorecon -RFv /sys/firmware/\nRelabeled /sys/firmware/efi from system_u:object_r:sysfs_t:s0 to system_u:object_r:efivarfs_t:s0\n```\n\ngrepping the selinux-policy.git source, I don't see that `systemd_resolved_t` has the `fs_read_efivars_files` applied.\n```\nselinux-policy.git]$ grep fs_read_efivarfs_files policy/modules/system/systemd.te \nfs_read_efivarfs_files(systemd_logind_t)\nfs_read_efivarfs_files(systemd_machined_t)\nfs_read_efivarfs_files(systemd_networkd_t)\nfs_read_efivarfs_files(systemd_localed_t)\nfs_read_efivarfs_files(systemd_hostnamed_t)\nfs_read_efivarfs_files(systemd_rfkill_t)\nfs_read_efivarfs_files(systemd_timedated_t)\nfs_read_efivarfs_files(systemd_sysctl_t)\nfs_read_efivarfs_files(systemd_hwdb_t)\nfs_read_efivarfs_files(systemd_gpt_generator_t)\nfs_read_efivarfs_files(systemd_userdbd_t)\n```\n\nNote, on another system the same issue occurs with `systemd_modules_load_t`\n\n```\nAVC avc:  denied  { read } for  pid=585 comm=\"systemd-modules\" name=\"SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=2253 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { open } for  pid=585 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=2253 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\nAVC avc:  denied  { getattr } for  pid=585 comm=\"systemd-modules\" path=\"/sys/firmware/efi/efivars/SecureBoot-8be4df61-93ca-11d2-aa0d-00e098032b8c\" dev=\"efivarfs\" ino=2253 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=1\n```", "timestamp": "2020-05-22 01:11:20", "update_id": 207839, "user_id": 911, "id": 1380554, "testcase_feedback": [], "user": {"name": "amessina", "email": "amessina@messinet.com", "id": 911, "avatar": "https://seccdn.libravatar.org/avatar/a425f417f49ccd9ca9d0d734e02ee3b0466aef7c7e859fff0cee973f59ade11c?s=24&d=retro", "openid": "amessina.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}, {"name": "trust admins"}]}}}, {"karma": 0, "comment_id": 1381370, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@jpbn what do you mean by \"hangs\"? Note the update can take a long time, see c#1.\n", "timestamp": "2020-05-22 09:11:26", "update_id": 207839, "user_id": 5290, "id": 1381370, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1381386, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@amessina, you are right the update addresses most of the issues reported, but not the one in the bz description, sorry for that.\n\n", "timestamp": "2020-05-22 09:22:21", "update_id": 207839, "user_id": 5290, "id": 1381386, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1381410, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@zpytela the script did not end. had to close terminal. ", "timestamp": "2020-05-22 09:55:15", "update_id": 207839, "user_id": 5276, "id": 1381410, "testcase_feedback": [], "user": {"name": "jpbn", "email": "jjb@xs4all.nl", "id": 5276, "avatar": "https://seccdn.libravatar.org/avatar/2b4dbed14bf1c128074015b78407d83196198d0a9740e0563dcad26e7cbb8db2?s=24&d=retro", "openid": "jpbn.id.fedoraproject.org", "groups": [{"name": "qa"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1382665, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-05-23 10:31:17", "update_id": 207839, "user_id": 284, "id": 1382665, "testcase_feedback": [], "user": {"name": "cairo", "email": "hansmueller183@yahoo.com", "id": 284, "avatar": "https://seccdn.libravatar.org/avatar/65ac01c684e76450d8575348b4894728e9c69ffdbd7c08718a4156e8e0daf5b6?s=24&d=retro", "openid": "cairo.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "signed_fpca"}]}}}, {"karma": 0, "comment_id": 1384093, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Works for me.\n\nTwo time this AVC is logged, but nothing breaks (note: I disable secure-boot in the UEFI).\n```\nAVC avc:  denied  { read } for  pid=1563 comm=\"systemd-modules\" name=\"SecureBoot-***\" dev=\"efivarfs\" ino=397 scontext=system_u:system_r:systemd_modules_load_t:s0 tcontext=system_u:object_r:efivarfs_t:s0 tclass=file permissive=0\n```", "timestamp": "2020-05-24 09:32:57", "update_id": 207839, "user_id": 5696, "id": 1384093, "testcase_feedback": [], "user": {"name": "thebiginfinity", "email": "print_hello_world+fas@protonmail.com", "id": 5696, "avatar": "https://seccdn.libravatar.org/avatar/70a1f4009b541bad37d7be03eb560cce5610935a02d0946cb491d8e0aa7d1865?s=24&d=retro", "openid": "thebiginfinity.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1385583, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Pushing to stable given the prevailing positive feedback. The remaining bugs (systemd-resolved, systemd-modules) will be resolved in the next build.", "timestamp": "2020-05-25 18:46:54", "update_id": 207839, "user_id": 5290, "id": 1385583, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1401865, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2020-06-06 01:14:44", "update_id": 211478, "user_id": 2935, "id": 1401865, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1402409, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Does this still apply? \"Please note updating from the previous package version selinux-policy-3.14.5-38.fc32 will have all filesystems relabeling as a result which cannot be prevented.\" ", "timestamp": "2020-06-06 21:13:48", "update_id": 211478, "user_id": 533, "id": 1402409, "testcase_feedback": [], "user": {"name": "churchyard", "email": "mhroncok@redhat.com", "id": 533, "avatar": "https://seccdn.libravatar.org/avatar/e221b70024cf971d8b43de0260d2babde9179cdf72605bf3168420e3efe07423?s=24&d=retro", "openid": "churchyard.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "sysadmin-badges"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 1402410, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@churchyard no relabeling of my system with this latest update", "timestamp": "2020-06-06 21:22:01", "update_id": 211478, "user_id": 2935, "id": 1402410, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1402448, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Not a complete fix. A suspend-to-RAM (closing laptop lid) and resume sequence still triggers similar issues, see https://bugzilla.redhat.com/show_bug.cgi?id=1844755 (I've closed it as duplicate, but it's still relevant for 1806123)", "timestamp": "2020-06-06 22:24:46", "update_id": 211478, "user_id": 5061, "id": 1402448, "testcase_feedback": [], "user": {"name": "mandree", "email": "matthias.andree@gmx.de", "id": 5061, "avatar": "https://seccdn.libravatar.org/avatar/9422432fd446c892ba4a14f0d4da735cd2a2f3de9f2c467366108f643bb9f8e4?s=24&d=retro", "openid": "mandree.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1402455, "bug_id": 1824196, "comment": {"karma": 1, "karma_critpath": 0, "text": "Not a complete fix. A suspend-to-RAM (closing laptop lid) and resume sequence still triggers similar issues, see https://bugzilla.redhat.com/show_bug.cgi?id=1844755.", "timestamp": "2020-06-06 22:27:35", "update_id": 211478, "user_id": 5061, "id": 1402455, "testcase_feedback": [], "user": {"name": "mandree", "email": "matthias.andree@gmx.de", "id": 5061, "avatar": "https://seccdn.libravatar.org/avatar/9422432fd446c892ba4a14f0d4da735cd2a2f3de9f2c467366108f643bb9f8e4?s=24&d=retro", "openid": "mandree.id.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 1402481, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@imabug I suppose you have updated from selinux-policy-3.14.5-39.fc32, is that correct?", "timestamp": "2020-06-06 23:56:22", "update_id": 211478, "user_id": 533, "id": 1402481, "testcase_feedback": [], "user": {"name": "churchyard", "email": "mhroncok@redhat.com", "id": 533, "avatar": "https://seccdn.libravatar.org/avatar/e221b70024cf971d8b43de0260d2babde9179cdf72605bf3168420e3efe07423?s=24&d=retro", "openid": "churchyard.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "sysadmin-badges"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 1402482, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@churchyard Yes", "timestamp": "2020-06-07 00:00:26", "update_id": 211478, "user_id": 2935, "id": 1402482, "testcase_feedback": [], "user": {"name": "imabug", "email": "eugenemah@gmail.com", "id": 2935, "avatar": "https://seccdn.libravatar.org/avatar/ea8ba927783ee0ef10e6f05f14791abf925972bac4f31aba458058d3e7907a6d?s=24&d=retro", "openid": "imabug.id.fedoraproject.org", "groups": [{"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedora-hams"}]}}}, {"karma": 0, "comment_id": 1402717, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "@churchyard, the statement will remain valid", "timestamp": "2020-06-07 08:50:51", "update_id": 211478, "user_id": 5290, "id": 1402717, "testcase_feedback": [], "user": {"name": "zpytela", "email": "zpytela@redhat.com", "id": 5290, "avatar": "https://seccdn.libravatar.org/avatar/f5f39686c696f412e8ed564241807306fff38278b276da30a2d3c41583d69f2a?s=24&d=retro", "openid": "zpytela.id.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}]}}}, {"karma": 0, "comment_id": 1402744, "bug_id": 1824196, "comment": {"karma": 0, "karma_critpath": 0, "text": "Thanks. Update took about 2 minutes.", "timestamp": "2020-06-07 09:42:46", "update_id": 211478, "user_id": 533, "id": 1402744, "testcase_feedback": [], "user": {"name": "churchyard", "email": "mhroncok@redhat.com", "id": 533, "avatar": "https://seccdn.libravatar.org/avatar/e221b70024cf971d8b43de0260d2babde9179cdf72605bf3168420e3efe07423?s=24&d=retro", "openid": "churchyard.id.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "sysadmin-badges"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}}]}], "updateid": "FEDORA-2020-a6cd8de2ed", "karma": 6, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}