Evolution fails to start, running from a command line results in: evolution: symbol lookup error: /lib64/libebook-contacts-1.2.so.4: undefined symbol: _ZNK4i18n12phonenumbers15PhoneNumberUtil20ParseAndKeepRawInputERKNSt7__cxx1112basic_stringIcSt11char_traitsIcESaIcEEES9_PNS0_11PhoneNumberE

Evolution was setup with my gmail account.

Problem: cannot install the best update candidate for package rpmdistro-repoquery-0^20231102git539d4c0-4.fc41.noarch - nothing provides dnf4 needed by rpmdistro-repoquery-0^20241122git5c26eb4-2.fc41.noarch from updates-testing

https://bugzilla.redhat.com/show_bug.cgi?id=2209408

Looks like there was a pull request submitted a while ago... https://src.fedoraproject.org/rpms/rpmdistro-repoquery/pull-request/1

After updating to swtpm-0.8.1.7. Windows 11 VM on gnome boxes failed to start, observed the following avc denials:

May 04 09:16:35 grumpey0 audit[3411]: AVC avc: denied { create } for pid=3411 comm="swtpm" name="1-win11-2-swtpm.sock" scontext=unconfined_u:unconfined_r:svirt_t:s0:c31,c772 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0 May 04 09:16:35 grumpey0 audit[3420]: AVC avc: denied { create } for pid=3420 comm="swtpm" name="2-win11-2-swtpm.sock" scontext=unconfined_u:unconfined_r:svirt_t:s0:c256,c313 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0 May 04 09:16:51 grumpey0 audit[3522]: AVC avc: denied { create } for pid=3522 comm="swtpm" name="3-win11-2-swtpm.sock" scontext=unconfined_u:unconfined_r:svirt_t:s0:c477,c1002 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0 May 04 09:18:14 grumpey0 audit[3679]: AVC avc: denied { create } for pid=3679 comm="swtpm" name="4-win11-2-swtpm.sock" scontext=unconfined_u:unconfined_r:svirt_t:s0:c521,c560 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0 May 04 09:20:55 grumpey0 audit[4478]: AVC avc: denied { create } for pid=4478 comm="swtpm" name="5-win11-2-swtpm.sock" scontext=unconfined_u:unconfined_r:svirt_t:s0:c423,c863 tcontext=unconfined_u:object_r:user_tmp_t:s0 tclass=sock_file permissive=0

After installing swtpm-0.8.1.8, I was able to start the VM and I am not currently observing any denials.

https://bugzilla.redhat.com/show_bug.cgi?id=2118287

During upgrade observed the following:

Upgrading : container-selinux-2:2.189.0-1.fc36.noarch 34/78 Running scriptlet: container-selinux-2:2.189.0-1.fc36.noarch 34/78 neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10384 (neverallow base_typeattr_18 scsi_generic_device_t (blk_file (write append))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10383 (neverallow base_typeattr_18 scsi_generic_device_t (chr_file (write append))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10382 (neverallow base_typeattr_17 scsi_generic_device_t (blk_file (read))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10381 (neverallow base_typeattr_17 scsi_generic_device_t (chr_file (read))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10380 (neverallow base_typeattr_16 fixed_disk_device_t (blk_file (write append))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10379 (neverallow base_typeattr_16 fixed_disk_device_t (chr_file (write append))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10378 (neverallow base_typeattr_15 fixed_disk_device_t (blk_file (read))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:10377 (neverallow base_typeattr_15 fixed_disk_device_t (chr_file (read))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:7770 (neverallow base_typeattr_7 unlabeled_t (file (entrypoint))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1931 (allow spc_t unlabeled_t (file (entrypoint)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:4890 (neverallow base_typeattr_2 memory_device_t (blk_file (write append))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:4889 (neverallow base_typeattr_2 memory_device_t (chr_file (write append))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:4888 (neverallow base_typeattr_1 memory_device_t (blk_file (read))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2389 (allow container_domain device_node (blk_file (ioctl read write getattr lock append open)))

neverallow check failed at /var/lib/selinux/targeted/tmp/modules/100/base/cil:4887 (neverallow base_typeattr_1 memory_device_t (chr_file (read))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2297 (allow container_device_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2300 (allow container_device_plugin_t device_node (chr_file (ioctl read write getattr lock append open))) <root> allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2316 (allow container_device_plugin_init_t device_node (chr_file (ioctl read write getattr lock append open))) <root> booleanif at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2387 true at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2388 allow at /var/lib/selinux/targeted/tmp/modules/200/container/cil:2390 (allow container_domain device_node (chr_file (ioctl read write getattr lock append open)))

Failed to generate binary /usr/sbin/semodule: Failed!