{"update": {"autokarma": true, "autotime": false, "stable_karma": 3, "stable_days": 0, "unstable_karma": -3, "require_bugs": true, "require_testcases": true, "display_name": "", "notes": "Allow unconfined domains to transition to container domains even in no-new-privs environment.\n\n----\n\nFixes for typebounds\n\n----\n\nFixes bounds check problems on systems with unconfined domain disabled.", "type": "enhancement", "status": "stable", "request": null, "severity": "unspecified", "suggest": "unspecified", "locked": false, "pushed": true, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2018-01-16 19:09:07", "date_modified": null, "date_approved": null, "date_testing": "2018-01-21 10:39:08", "date_stable": "2018-01-23 21:42:17", "alias": "FEDORA-2018-324df658f1", "test_gating_status": "passed", "from_tag": null, "date_pushed": "2018-01-23 21:42:17", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2018-324df658f1", "title": "container-selinux-2.42-1.fc27", "version_hash": "6f1e3fe4020df3a9ce5e7617295f3f361824a4fe", "release": {"name": "F27", "long_name": "Fedora 27", "version": "27", "id_prefix": "FEDORA", "branch": "f27", "dist_tag": "f27", "stable_tag": "f27-updates", "testing_tag": "f27-updates-testing", "candidate_tag": "f27-updates-candidate", "pending_signing_tag": "f27-signing-pending", "pending_testing_tag": "f27-updates-testing-pending", "pending_stable_tag": "f27-updates-pending", "override_tag": "f27-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": null, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "critpath_mandatory_days_in_testing": 14, "mandatory_days_in_testing": 7, "critpath_min_karma": 2, "min_karma": 1, "setting_status": null}, "user": {"name": "dwalsh", "email": "dwalsh@redhat.com", "id": 1643, "avatar": "https://seccdn.libravatar.org/avatar/1c5e583ab8b950eb480915ed4b094dd68fe4e57e7f46a031473ae383bf4d5495?s=24&d=retro", "openid": "dwalsh.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "cvspolicycoreutils"}, {"name": "gitsetroubleshoot"}, {"name": "hgsetroubleshoot"}, {"name": "container-sig"}, {"name": "summer-coding"}, {"name": "gitsystem-config-selinux"}, {"name": "fedora-contributor"}, {"name": "cla_redhat"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "ipausers"}, {"name": "gitselinux-policy"}, {"name": "trust admins"}]}, "comments": [{"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by dwalsh. ", "timestamp": "2018-01-16 19:09:07", "update_id": 105839, "user_id": 91, "id": 720396, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has obsoleted [container-selinux-2.41-1.fc27](https://bodhi.fedoraproject.org/updates/FEDORA-2018-8d78cc34a3), and has inherited its bugs and notes.", "timestamp": "2018-01-16 19:09:10", "update_id": 105839, "user_id": 91, "id": 720398, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 14:34:21", "update_id": 105839, "user_id": 2468, "id": 721177, "bug_feedback": [{"karma": 1, "comment_id": 721177, "bug_id": 1531858, "bug": {"bug_id": 1531858, "title": "On fully upgraded F27, can't install container-selinux", "security": false, "parent": false}}, {"karma": 1, "comment_id": 721177, "bug_id": 1532594, "bug": {"bug_id": 1532594, "title": "container-selinux-v2.41.0 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 721177, "bug_id": 1514795, "bug": {"bug_id": 1514795, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 15:43:58", "update_id": 105839, "user_id": 2711, "id": 721194, "bug_feedback": [{"karma": 1, "comment_id": 721194, "bug_id": 1531858, "bug": {"bug_id": 1531858, "title": "On fully upgraded F27, can't install container-selinux", "security": false, "parent": false}}, {"karma": 1, "comment_id": 721194, "bug_id": 1532594, "bug": {"bug_id": 1532594, "title": "container-selinux-v2.41.0 is available", "security": false, "parent": false}}, {"karma": 1, "comment_id": 721194, "bug_id": 1514795, "bug": {"bug_id": 1514795, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "mpatel", "email": "mpatel@redhat.com", "id": 2711, "avatar": "https://seccdn.libravatar.org/avatar/e12fa8848e85428c43c64bae5545709a5f11e6540b291574f8db85506d6e3c0d?s=24&d=retro", "openid": "mpatel.id.stg.fedoraproject.org", "groups": []}}, {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 16:06:43", "update_id": 105839, "user_id": 3753, "id": 721203, "bug_feedback": [{"karma": 0, "comment_id": 721203, "bug_id": 1531858, "bug": {"bug_id": 1531858, "title": "On fully upgraded F27, can't install container-selinux", "security": false, "parent": false}}, {"karma": 0, "comment_id": 721203, "bug_id": 1532594, "bug": {"bug_id": 1532594, "title": "container-selinux-v2.41.0 is available", "security": false, "parent": false}}, {"karma": 0, "comment_id": 721203, "bug_id": 1514795, "bug": {"bug_id": 1514795, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": -1, "karma_critpath": 0, "text": "Docker labeling seems broken:\n\n    # docker run --rm --security-opt label:disable fedora cat /proc/self/attr/current\n    system_u:system_r:container_runtime_t:s0\n    [expected: spc_t]\n\n    # docker run --rm --privileged --userns=host fedora  cat /proc/self/attr/current\n    [same thing]\n\nSorry for the bad news.", "timestamp": "2018-01-18 17:01:45", "update_id": 105839, "user_id": 3407, "id": 721206, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "Never mind my last comment. I can't reproduce this failure on a fresh f27 virt.", "timestamp": "2018-01-18 20:48:09", "update_id": 105839, "user_id": 3407, "id": 721295, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "santiago", "email": "santiago@redhat.com", "id": 3407, "avatar": "https://seccdn.libravatar.org/avatar/ea76e06d92bea441997ae5b01983859fcee775de243c13c2efb1731b6f444328?s=24&d=retro", "openid": "santiago.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "container-sig"}, {"name": "gitrpmgrill"}, {"name": "trust admins"}]}}, {"karma": 1, "karma_critpath": 0, "text": "LGTM", "timestamp": "2018-01-18 21:58:15", "update_id": 105839, "user_id": 568, "id": 721318, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "jwhonce", "email": "jhonce@redhat.com", "id": 568, "avatar": "https://seccdn.libravatar.org/avatar/85e1937a7a700f0ddef9a345b708f062beef859636bbc7d1cf1af5567214ed19?s=24&d=retro", "openid": "jwhonce.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2018-01-21 10:41:46", "update_id": 105839, "user_id": 91, "id": 721836, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for batched by bodhi. ", "timestamp": "2018-01-21 10:42:06", "update_id": 105839, "user_id": 91, "id": 721863, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been submitted for stable by dwalsh. ", "timestamp": "2018-01-22 13:39:21", "update_id": 105839, "user_id": 91, "id": 722055, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"karma": 0, "karma_critpath": 0, "text": "This update has been pushed to stable.", "timestamp": "2018-01-23 21:49:40", "update_id": 105839, "user_id": 91, "id": 722900, "bug_feedback": [], "testcase_feedback": [], "user": {"name": "bodhi", "email": null, "id": 91, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "container-selinux-2.42-1.fc27", "signed": true, "release_id": 17, "type": "rpm", "epoch": 2}], "bugs": [{"bug_id": 1514795, "title": "SELinux is preventing systemd from 'create' accesses on the unix_stream_socket Unknown.", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 720840, "bug_id": 1514795, "comment": {"karma": 1, "karma_critpath": 0, "text": "looks good with quick tests.", "timestamp": "2018-01-17 20:23:59", "update_id": 105472, "user_id": 3753, "id": 720840, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 716703, "bug_id": 1514795, "comment": {"karma": 0, "karma_critpath": 0, "text": "Confirmed fixes #1531858 \n\nkarma: +1", "timestamp": "2018-01-08 17:08:54", "update_id": 105368, "user_id": 207, "id": 716703, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 719427, "bug_id": 1514795, "comment": {"karma": 0, "karma_critpath": 0, "text": "works for me\n\n\n\nkarma: +1", "timestamp": "2018-01-15 15:37:20", "update_id": 105471, "user_id": 207, "id": 719427, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 721177, "bug_id": 1514795, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 14:34:21", "update_id": 105839, "user_id": 2468, "id": 721177, "testcase_feedback": [], "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 721194, "bug_id": 1514795, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 15:43:58", "update_id": 105839, "user_id": 2711, "id": 721194, "testcase_feedback": [], "user": {"name": "mpatel", "email": "mpatel@redhat.com", "id": 2711, "avatar": "https://seccdn.libravatar.org/avatar/e12fa8848e85428c43c64bae5545709a5f11e6540b291574f8db85506d6e3c0d?s=24&d=retro", "openid": "mpatel.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 721203, "bug_id": 1514795, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 16:06:43", "update_id": 105839, "user_id": 3753, "id": 721203, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}, {"bug_id": 1531858, "title": "On fully upgraded F27, can't install container-selinux", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 720840, "bug_id": 1531858, "comment": {"karma": 1, "karma_critpath": 0, "text": "looks good with quick tests.", "timestamp": "2018-01-17 20:23:59", "update_id": 105472, "user_id": 3753, "id": 720840, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 716703, "bug_id": 1531858, "comment": {"karma": 0, "karma_critpath": 0, "text": "Confirmed fixes #1531858 \n\nkarma: +1", "timestamp": "2018-01-08 17:08:54", "update_id": 105368, "user_id": 207, "id": 716703, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 719427, "bug_id": 1531858, "comment": {"karma": 0, "karma_critpath": 0, "text": "works for me\n\n\n\nkarma: +1", "timestamp": "2018-01-15 15:37:20", "update_id": 105471, "user_id": 207, "id": 719427, "testcase_feedback": [], "user": {"name": "anonymous", "email": null, "id": 207, "avatar": "https://seccdn.libravatar.org/avatar/37a8eec1ce19687d132fe29051dca629d164e2c4958ba141d5f4133a33f0688f?s=24&d=retro", "openid": "anonymous.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 1, "comment_id": 721177, "bug_id": 1531858, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 14:34:21", "update_id": 105839, "user_id": 2468, "id": 721177, "testcase_feedback": [], "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 721194, "bug_id": 1531858, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 15:43:58", "update_id": 105839, "user_id": 2711, "id": 721194, "testcase_feedback": [], "user": {"name": "mpatel", "email": "mpatel@redhat.com", "id": 2711, "avatar": "https://seccdn.libravatar.org/avatar/e12fa8848e85428c43c64bae5545709a5f11e6540b291574f8db85506d6e3c0d?s=24&d=retro", "openid": "mpatel.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 721203, "bug_id": 1531858, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 16:06:43", "update_id": 105839, "user_id": 3753, "id": 721203, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}, {"bug_id": 1532594, "title": "container-selinux-v2.41.0 is available", "security": false, "parent": false, "feedback": [{"karma": 1, "comment_id": 721177, "bug_id": 1532594, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 14:34:21", "update_id": 105839, "user_id": 2468, "id": 721177, "testcase_feedback": [], "user": {"name": "runcom", "email": "amurdaca@redhat.com", "id": 2468, "avatar": "https://seccdn.libravatar.org/avatar/3d724e4084e6202a0ecec93274be9a35984f6aa4df6df50a2aafb348da4b948e?s=24&d=retro", "openid": "runcom.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 1, "comment_id": 721194, "bug_id": 1532594, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 15:43:58", "update_id": 105839, "user_id": 2711, "id": 721194, "testcase_feedback": [], "user": {"name": "mpatel", "email": "mpatel@redhat.com", "id": 2711, "avatar": "https://seccdn.libravatar.org/avatar/e12fa8848e85428c43c64bae5545709a5f11e6540b291574f8db85506d6e3c0d?s=24&d=retro", "openid": "mpatel.id.stg.fedoraproject.org", "groups": []}}}, {"karma": 0, "comment_id": 721203, "bug_id": 1532594, "comment": {"karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2018-01-18 16:06:43", "update_id": 105839, "user_id": 3753, "id": 721203, "testcase_feedback": [], "user": {"name": "tomsweeneyredhat", "email": "tsweeney@redhat.com", "id": 3753, "avatar": "https://seccdn.libravatar.org/avatar/81515e3e34f17b21a781f8126bcb7fc6cf427102bab5b12e7ffe30ee1eef5a86?s=24&d=retro", "openid": "tomsweeneyredhat.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}]}], "updateid": "FEDORA-2018-324df658f1", "karma": 5, "content_type": "rpm", "test_cases": []}, "can_edit": false, "ci_allowed": false}