BZ#2092808 seems to have been fixed. The first connection to the VPN causes winbind to go offline for some reason, but I don't think it's related to SELinux.
BZ#2092808 selinux-policy prevents 30-winbind from invoking smbcontrol and testparam
@dustymabe I think it is needed to backport https://github.com/coreos/console-login-helper-messages/pull/110 to F36, will it be?
@martinpitt did you notice any actual failure apart from the avcs?
@kparal do you happen to know how this denial is triggered? This one definitely is new, but likely a result of updating other packages.
I don't think this build brings any regression.
This update has been submitted for testing by zpytela.
This update's test gating status has been changed to 'waiting'.
This update has obsoleted selinux-policy-36.11-1.fc36, and has inherited its bugs and notes.
This update's test gating status has been changed to 'failed'.
This update's test gating status has been changed to 'passed'.
This update has been pushed to testing.
Works.
works
This update can be pushed to stable now if the maintainer wishes
works
works
Works for me.
See here: https://github.com/cockpit-project/bots/pull/3627 Lots of tests fail with
NetworkManager did not change in this image, just
and some others which sound less relevant.
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
no problems here
This does appear to fix BZ#2080043. I do see some other denials, though (as @martinpitt mentioned):
They don't seem to be harming my system.
I see:
repeated in journal over and over again. Quite interestingly, it's not shown in "selinux alert browser".
BZ#2092808 seems to have been fixed. The first connection to the VPN causes winbind to go offline for some reason, but I don't think it's related to SELinux.
no issues
no regressions noted
No issues noted here on server/desktop
@dustymabe I think it is needed to backport https://github.com/coreos/console-login-helper-messages/pull/110 to F36, will it be? @martinpitt did you notice any actual failure apart from the avcs? @kparal do you happen to know how this denial is triggered? This one definitely is new, but likely a result of updating other packages. I don't think this build brings any regression.
@zpytela: No, the tests themselves were okay. Just the many avcs.
@zpytela: I created https://bugzilla.redhat.com/show_bug.cgi?id=2111834 so we can discuss there.
This update has been obsoleted by selinux-policy-36.13-3.fc36.