FEDORA-2025-ccd9893b75 — bugfix update for pcp

stable

pcp-7.0.3-1.fc43

FEDORA-2025-ccd9893b75 created by nathans 11 months ago for Fedora 43

Minor bugfix update.

Selinux policy update for pmlogger AVC denials

Update selinux policy to fix pmda-hdb selinux issue

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2025-ccd9893b75

This update has been submitted for testing by nathans.

11 months ago

This update's test gating status has been changed to 'passed'.

11 months ago

This update has obsoleted pcp-7.0.2-3.fc43, and has inherited its bugs and notes.

11 months ago

jkurik commented & provided feedback 11 months ago

karma

I am getting a new AVC with this build. Probably not related to PCP it self, but rather to some changes in selinux-policy ?

# ausearch -m AVC
type=AVC msg=audit(1762936134.961:3109): avc:  denied  { name_bind } for  pid=108196 comm="pmcd" src=44321 scontext=system_u:system_r:pcp_pmcd_t:s0 tcontext=system_u:object_r:ephemeral_port_t:s0 tclass=tcp_socket permissive=0

# audit2allow -a
#============= pcp_pmcd_t ==============
#!!!! This avc can be allowed using the boolean 'nis_enabled'
allow pcp_pmcd_t ephemeral_port_t:tcp_socket name_bind;

BZ#2397077 pmda-hdb triggers a selinux AVC

Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.

11 months ago

jkurik commented & provided feedback 11 months ago

karma

Uppps... the comment above was related to rawhide build (f44), not to the f43 one. This build seems to be OK.

BZ#2397077 pmda-hdb triggers a selinux AVC

This update has been pushed to testing.

11 months ago

This update can be pushed to stable now if the maintainer wishes

11 months ago

This update's test gating status has been changed to 'failed'.