Comments

178 Comments

I did something similar too, but without a rollback to the previous version.

It would be worth scriptletting update to execute touch /.autorelabel during the next reboot instead of starting restorecon.

Update is holding over on running scriptlet selinux-policy-targeted-3.14.5-36.fc32.noarch

SELinux is preventing restorecon from using the mac_admin capability.

Additional Information:
Source Context                unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c102
                          3
Target Context                unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c102
                          3
Target Objects                Unknown [ capability2 ]
Source                        restorecon
Source Path                   restorecon
Port                          <Unknown>
Host                          localhost
Local Policy RPM              selinux-policy-targeted-3.14.5-34.fc32.noarch
                          selinux-policy-targeted-3.14.5-36.fc32.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     localhost
Platform                      Linux 5.6.2 #1 SMP Thu
                          Apr 2 23:50:41 EEST 2020 x86_64 x86_64
Alert Count                   1
First Seen                    2020-04-09 23:41:01 EEST
Last Seen                     2020-04-09 23:41:01 EEST

Raw Audit Messages
type=AVC msg=audit(1586464861.926:256): avc:  denied  { mac_admin } for  pid=29605 comm="restorecon" capability=33  scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=capability2 permissive=0


Hash: restorecon,setfiles_t,setfiles_t,capability2,mac_admin
ERROR: Can't open /var/log/freshclam.log in append mode (check permissions!).
ERROR: Problem with internal logger (UpdateLogFile = /var/log/freshclam.log).
ERROR: initialize: libfreshclam init failed.
ERROR: Initialization error!

Transactions are going only after --exclude avogadro2-libs

@sagitter

It's not pulls up for a few of weeks and dnf does no respond for --allowerasing --best --skip-broken

Transaction test error:
  file /usr/lib64/avogadro2/scripts from install of avogadro2-libs-1.93.0-3.fc32.x86_64
conflicts with file from package avogadro2-libs-1.93.0-1.fc32.x86_64

Some omissible errors with FAT32 UEFI partition:

error: lsetfilecon: (/boot/efi/EFI/fedora, system_u:object_r:boot_t:s0) Operation not supported

error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5e1d7551, system_u:object_r:boot_t:s0) Operation not supported
Transaction test error:
  file /usr/share/locale/en_GB/LC_MESSAGES/libkicker.mo from install of plasma-workspace-5.17.3-1.fc31.x86_64
conflicts with file from package kde-i18n-British-1:3.5.10-30.fc31.noarch
  file /usr/share/locale/fr/LC_MESSAGES/libkicker.mo from install of plasma-workspace-5.17.3-1.fc31.x86_64
conflicts with file from package kde-i18n-French-1:3.5.10-30.fc31.noarch
  file /usr/share/locale/ru/LC_MESSAGES/libkicker.mo from install of plasma-workspace-5.17.3-1.fc31.x86_64
conflicts with file from package kde-i18n-Russian-1:3.5.10-30.fc31.noarch
  file /usr/share/locale/uk/LC_MESSAGES/libkicker.mo from install of plasma-workspace-5.17.3-1.fc31.x86_64
conflicts with file from package kde-i18n-Ukrainian-1:3.5.10-30.fc31.noarch


Transaction test error:
  file /usr/share/color-schemes/Oxygen.colors from install of qt5-style-oxygen-5.17.3-1.fc31.x86_64
conflicts with file from package plasma-desktop-5.16.5-1.fc31.x86_64
  file /usr/share/color-schemes/OxygenCold.colors from install of qt5-style-oxygen-5.17.3-1.fc31.x86_64
conflicts with file from package plasma-desktop-5.16.5-1.fc31.x86_64

Works well here

Works on my x86_64, but dnf outputs some complaints during installation:

error: lsetfilecon: (/boot/efi/EFI/fedora/fonts, system_u:object_r:boot_t:s0) Operation not supported
error: lsetfilecon: (/boot/efi/EFI/fedora/grubx64.efi;5d9ba597, system_u:object_r:boot_t:s0) Operation not supported
 Problem 2: package python3-upt-pypi-0.4-1.fc31.noarch requires upt, but none of the providers can be installed
  - package python3-upt-pypi-0.4-1.fc31.noarch requires python3.7dist(upt) >= 0.9, but none of the providers can be installed
  - conflicting requests
  - nothing provides python3-spdx-lookup needed by upt-0.10.3-1.fc31.noarch
  - nothing provides python3.7dist(spdx-lookup) needed by upt-0.10.3-1.fc31.noarch
 Problem 1: conflicting requests
  - nothing provides python3-spdx-lookup needed by upt-0.10.3-1.fc31.noarch
  - nothing provides python3.7dist(spdx-lookup) needed by upt-0.10.3-1.fc31.noarch

Works good

Works well

BZ#1756024 Qt applications cannot be maximized with double click in title bar

After installing grubby-deprecated updating a kernel restlessly changes set-daefault= in grub.cfg from "${saved_entry}" to "0"

After installing grubby-deprecated kernel updates restlessly change set-daefault= in grub.cfg from "${saved_entry}" to "0"

karma
Problem 1: package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7()(64bit), but none of the providers can be installed
  - package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7(LIBNFTNL_5)(64bit), but none of the providers can be installed
  - package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7(LIBNFTNL_8)(64bit), but none of the providers can be installed
  - cannot install both libnftnl-1.1.3-1.fc30.x86_64 and libnftnl-1.1.1-6.fc30.x86_64
  - cannot install both libnftnl-1.1.1-6.fc30.x86_64 and libnftnl-1.1.3-1.fc30.x86_64
  - cannot install the best update candidate for package libnftnl-1.1.1-6.fc30.x86_64
  - cannot install the best update candidate for package iptables-nft-1.8.2-2.fc30.x86_64
 Problem 2: problem with installed package iptables-nft-1.8.2-2.fc30.x86_64
  - package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7()(64bit), but none of the providers can be installed
  - package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7(LIBNFTNL_5)(64bit), but none of the providers can be installed
  - package iptables-nft-1.8.2-2.fc30.x86_64 requires libnftnl.so.7(LIBNFTNL_8)(64bit), but none of the providers can be installed
  - cannot install both libnftnl-1.1.3-1.fc30.x86_64 and libnftnl-1.1.1-6.fc30.x86_64
  - cannot install both libnftnl-1.1.1-6.fc30.x86_64 and libnftnl-1.1.3-1.fc30.x86_64
  - package nftables-1:0.9.1-2.fc30.x86_64 requires libnftnl.so.11()(64bit), but none of the providers can be installed
  - package nftables-1:0.9.1-2.fc30.x86_64 requires libnftnl.so.11(LIBNFTNL_11)(64bit), but none of the providers can be installed
  - cannot install the best update candidate for package nftables-1:0.9.0-5.fc30.x86_64

iptables-nft needs update due to a new libnftnl build

- cannot install both libnftnl-1.1.1-6.fc30.x86_64 and libnftnl-1.1.3-1.fc30.x86_64
- cannot install the best update candidate for package iptables-nft-1.8.2-1.fc30.x86_64

Firefox-69 (beta) constantly evokes SETroubleshoot messages:

SELinux is preventing rtkit-daemon from sys_ptrace access on the cap_userns labeled rtkit_daemon_t

Firefox-69 (beta) constantly evokes SETroubleshoot messages:

SELinux is preventing rtkit-daemon from sys_ptrace access on the cap_userns labeled rtkit_daemon_t