stable

FEDORA-2022-3ec8ad0da1 created by zpytela 10 months ago for Fedora 35

New F35 selinux-policy build

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2022-3ec8ad0da1

This update has been submitted for testing by zpytela.

10 months ago

This update's test gating status has been changed to 'waiting'.

10 months ago

This update's test gating status has been changed to 'failed'.

10 months ago

This update's test gating status has been changed to 'passed'.

10 months ago

This update has been pushed to testing.

10 months ago
User Icon bojan commented & provided feedback 10 months ago

New denials with this policy:

type=AVC msg=audit(1642128594.766:279): avc: denied { unlink } for pid=2446 comm="systemd-user-ru" name="bus" dev="tmpfs" ino=36 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=unconfined_u:object_r:session_dbusd_tmp_t:s0 tclass=sock_file permissive=0

type=AVC msg=audit(1642128440.371:212): avc: denied { write } for pid=989 comm="gdm-wayland-ses" name="bus" dev="tmpfs" ino=36 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:session_dbusd_tmp_t:s0 tclass=sock_file permissive=0

type=AVC msg=audit(1642128153.989:723): avc: denied { unlink } for pid=12287 comm="systemd-user-ru" name="bus" dev="tmpfs" ino=2595 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:object_r:session_dbusd_tmp_t:s0 tclass=sock_file permissive=0

User Icon zpytela commented & provided feedback 10 months ago

@bojan, I suppose they are rather a result of other software update, but anyway fix is on the way. https://bugzilla.redhat.com/show_bug.cgi?id=2039671 reported on F34

User Icon bojan commented & provided feedback 10 months ago

Cool, thanks for the super quick heads-up!

new selinux warns after update, but system is working.

User Icon besser82 commented & provided feedback 10 months ago
karma

Works great! LGTM! =)

User Icon frenaud commented & provided feedback 10 months ago
karma
BZ#2038963 smbcontrol produces AVC: denied {read} dev="proc"

This update can be pushed to stable now if the maintainer wishes

10 months ago
User Icon zpytela commented & provided feedback 10 months ago

Thanks everybody for your feedback, pushing this update as another one is on its way.

This update has been submitted for stable by zpytela.

10 months ago

This update has been pushed to stable.

10 months ago

Please login to add feedback.

Metadata
Type
bugfix
Severity
medium
Karma
2
Signed
Content Type
RPM
Test Gating
Settings
Unstable by Karma
-2
Stable by Karma
5
Stable by Time
14 days
Dates
submitted
10 months ago
in testing
10 months ago
in stable
10 months ago
BZ#2038963 smbcontrol produces AVC: denied {read} dev="proc"
0
1

Automated Test Results