FEDORA-2021-050d4e8def — bugfix update for selinux-policy

stable

selinux-policy-3.14.6-37.fc33

FEDORA-2021-050d4e8def created by zpytela 3 years ago for Fedora 33

New F33 selinux-policy build is available

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-050d4e8def

This update has been submitted for testing by zpytela.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

imabug provided feedback 3 years ago

karma

This update has been pushed to testing.

3 years ago

ralston commented & provided feedback 3 years ago

karma

This update appears to correct BZ#1880948:

$ restorecon -FR -v /run/chrony*
$ ls -lsaZ /run/chrony*
/run/chrony:
total 4
0 drwxr-x---.  2 chrony chrony system_u:object_r:chronyd_var_run_t:s0   80 May  2 13:49 ./
0 drwxr-xr-x. 59 root   root   system_u:object_r:var_run_t:s0         1720 May  2 02:01 ../
4 -rw-r--r--.  1 root   root   system_u:object_r:chronyd_var_run_t:s0    5 May  2 01:49 chronyd.pid
0 srwxr-xr-x.  1 chrony chrony system_u:object_r:chronyd_var_run_t:s0    0 May  2 01:49 chronyd.sock=

/run/chrony-dhcp:
total 4
0 drwxr-xr-x.  2 root root system_u:object_r:chronyd_var_run_t:s0   60 May  2 13:49 ./
0 drwxr-xr-x. 59 root root system_u:object_r:var_run_t:s0         1720 May  2 02:01 ../
4 -rw-r--r--.  1 root root system_u:object_r:chronyd_var_run_t:s0   26 May  2 13:49 enp7s0.sources

This update can be pushed to stable now if the maintainer wishes

3 years ago

zpytela commented & provided feedback 3 years ago

@ralston, unfortunately restorecon is needed to runif you want to have the types fixed right away. Restarting the services only helps if the directory is removed and created again. After reboot, the labels should be assigned correctly.

andilinux commented & provided feedback 3 years ago

karma

works

This update has been submitted for stable by bodhi.

3 years ago

andilinux commented & provided feedback 3 years ago

karma

works

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

bugfix

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

14 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

Builds

selinux-policy-3.14.6-37.fc33

BZ#1880948 SELinux is preventing chronyd from 'read' accesses on the soubor wlp4s0.sources.

BZ#1897388 SELinux is preventing dhclient-script from read access on the file /usr/bin/chronyc

BZ#1931470 avc: denied { fowner } comm="groupadd" comm="mandb" capability=3

BZ#1943136 SELinux is preventing postgrey from 'read' accesses on the file unix.

BZ#1946020 SELinux is preventing brltty from 'create' accesses on the bluetooth_socket labeled brltty_t.

BZ#1952311 SELinux is preventing pluto from 'search' accesses on the diretório opencryptoki.

selinux-policy-3.14.6-37.fc33

Automated Test Results

ignored