FEDORA-2025-ccd9893b75 — bugfix update for pcp

stable

pcp-7.0.3-1.fc43

FEDORA-2025-ccd9893b75 created by nathans a month ago for Fedora 43

Minor bugfix update.

Selinux policy update for pmlogger AVC denials

Update selinux policy to fix pmda-hdb selinux issue

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-ccd9893b75

This update has been submitted for testing by nathans.

a month ago

This update's test gating status has been changed to 'passed'.

a month ago

This update has obsoleted pcp-7.0.2-3.fc43, and has inherited its bugs and notes.

a month ago

jkurik commented & provided feedback a month ago

karma

I am getting a new AVC with this build. Probably not related to PCP it self, but rather to some changes in selinux-policy ?

# ausearch -m AVC
type=AVC msg=audit(1762936134.961:3109): avc:  denied  { name_bind } for  pid=108196 comm="pmcd" src=44321 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket permissive=0

# audit2allow -a
#============= pcp_pmcd_t ==============
#!!!! This avc can be allowed using the boolean 'nis_enabled'
allow pcp_pmcd_t ephemeral_port_t:tcp_socket name_bind;

BZ#2397077 pmda-hdb triggers a selinux AVC

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

a month ago

jkurik commented & provided feedback a month ago

karma

Uppps... the comment above was related to rawhide build (f44), not to the f43 one. This build seems to be OK.

BZ#2397077 pmda-hdb triggers a selinux AVC

This update has been pushed to testing.

a month ago

This update can be pushed to stable now if the maintainer wishes

a month ago

This update's test gating status has been changed to 'failed'.