{"update": {"autokarma": false, "autotime": false, "stable_karma": 3, "stable_days": 7, "unstable_karma": -3, "require_bugs": false, "require_testcases": false, "display_name": "", "notes": "- change of exit code during transition from mockchain to mock --chain\n- support run in Fedora Toolbox (otaylor@fishsoup.net)\n- add cheat sheet\n- Adding tool for parsing build.log (sisi.chlupova@gmail.com)\n- load secondary groups [RHBZ#1264005]\n- pass --allowerasing by default to DNF [GH#251]\n- make include() functional for --chain [GH#263]\n- Removing buildstderr from log - configurable via \n _mock_stderr_line_prefix (sisi.chlupova@gmail.com)\n- Fixup: Use rpm -qa --root instead of running rpm -qa in chroot\n (miro@hroncok.cz)\n- DynamicBuildrequires: Detect when no new packages were installed\n (miro@hroncok.cz)\n- Allow more loop devices (sisi.chlupova@gmail.com)\n- Fix binary locations in /bin for split-usr setups (bero@lindev.ch)\n- describe behaviour of resultdir together with --chain [GH#267]\n- repeat dynamic requires if needed [GH#276]\n- Fix compatibility with pre-4.15 RPM versions with DynamicBuildRequires\n (i.gnatenko.brain@gmail.com)\n- Enable dynamic BuildRequires by default (i.gnatenko.brain@gmail.com)\n- bootstrap: independent network configuration (praiskup@redhat.com)\n- Update the man page about ~/.config/mock/FOO.cfg (miro@hroncok.cz)\n- explicitely convert releasever to string [GH#270]\n- grant anyone access to bind-mounted /etc/resolv.conf (praiskup@redhat.com)\n- -r FOO will try to read first ~/.mock/FOO.cfg if exists\n- enhance man page of mock about --chain\n- bash completion for --chain\n- respect use_host_resolv config even with use_nspawn (praiskup@redhat.com)\n- Fix crash on non-ascii dnf log messages (bkorren@redhat.com) \n- add deprecation warning to mockchain\n- replace mockchain with `mock --chain` command (necas.marty@gmail.com)\n- switch to python3 on el7 (msuchy@redhat.com)\n\n- disable updates-modulare repos for now\n- buildrequire systemd-srpm-macros to get _sysusersdir\n- removed info about metadata expire (khoidinhtrinh@gmail.com)\n- added updates-modular to 29 and 30 (khoidinhtrinh@gmail.com)\n- replace groupadd using sysusers.d\n- core-configs: epel-7 profiles to use mirrorlists (praiskup@redhat.com)\n- EOL Fedora 28\n- do not protect packages in chroot [GH#286]\n- Fix value for dist for OpenMandriva 4.0 configs (ngompa13@gmail.com)\n- Add initial OpenMandriva distribution targets (ngompa13@gmail.com)\n", "type": "bugfix", "status": "unpushed", "request": null, "severity": "low", "suggest": "unspecified", "locked": false, "pushed": false, "critpath": false, "critpath_groups": null, "close_bugs": true, "date_submitted": "2019-08-08 12:22:49", "date_modified": "2019-08-13 07:55:34", "date_approved": null, "date_testing": "2019-08-09 01:35:59", "date_stable": null, "alias": "FEDORA-2019-fb9320e658", "test_gating_status": "ignored", "from_tag": null, "date_pushed": "2019-08-09 01:35:59", "meets_testing_requirements": true, "url": "https://bodhi.stg.fedoraproject.org/updates/FEDORA-2019-fb9320e658", "title": "mock-1.4.17-1.fc29 mock-core-configs-30.5-1.fc29", "version_hash": "e3f69b79867dd5901c95c82dcdfedbcf47e5e9b5", "release": {"name": "F29", "long_name": "Fedora 29", "version": "29", "id_prefix": "FEDORA", "branch": "f29", "dist_tag": "f29", "stable_tag": "f29-updates", "testing_tag": "f29-updates-testing", "candidate_tag": "f29-updates-candidate", "pending_signing_tag": "f29-signing-pending", "pending_testing_tag": "f29-updates-testing-pending", "pending_stable_tag": "f29-updates-pending", "override_tag": "f29-override", "mail_template": "fedora_errata_template", "state": "archived", "composed_by_bodhi": true, "create_automatic_updates": false, "package_manager": "dnf", "testing_repository": "updates-testing", "released_on": null, "eol": null, "setting_status": null}, "user": {"id": 412, "name": "msuchy", "email": "msuchy@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/3c24b9606771a7fd0ab5c998a417806cb757cdd2db201a53344eb9595d375a69?s=24&d=retro", "openid": "msuchy.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "fi-apprentice"}, {"name": "gitcopr"}, {"name": "l10n"}, {"name": "communishift"}, {"name": "sysadmin-copr"}, {"name": "aws-copr"}, {"name": "rubygems-build"}, {"name": "ipausers"}, {"name": "copr-sig"}, {"name": "theforeman"}, {"name": "signed_fpca"}, {"name": "sysadmin-cloud"}, {"name": "gitmock"}, {"name": "fedorabugs"}, {"name": "fedora-contributor"}, {"name": "gitabrt"}, {"name": "sysadmin-dns"}, {"name": "gitspacewalk"}, {"name": "cvsl10n"}, {"name": "retrace"}, {"name": "sysadmin"}, {"name": "gitkatello"}, {"name": "legal"}, {"name": "communishift-log-detective"}, {"name": "communishift-fedora-review-service"}, {"name": "aws-master"}, {"name": "communishift-lightspeed-build"}]}, "comments": [{"id": 992074, "karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by msuchy. ", "timestamp": "2019-08-08 12:22:49", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 992075, "karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'waiting'.", "timestamp": "2019-08-08 12:22:49", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 992082, "karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2019-08-08 12:23:10", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 992605, "karma": 0, "karma_critpath": 0, "text": "This update has been pushed to testing.", "timestamp": "2019-08-09 01:36:11", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 993775, "karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-08-10 13:40:29", "update_id": 145955, "user_id": 119, "bug_feedback": [{"karma": 0, "comment_id": 993775, "bug_id": 1264005, "bug": {"bug_id": 1264005, "title": "when dropping privileges secondary user groups are not loaded", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"id": 119, "name": "zbyszek", "email": "zbyszek@in.waw.pl", "avatar": "https://seccdn.libravatar.org/avatar/75e36ea1fdb970398aa9b00a23ab502648e060fb1f569d96cd0fa063aa2147d4?s=24&d=retro", "openid": "zbyszek.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}, {"id": 995670, "karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'greenwave_failed'.", "timestamp": "2019-08-12 08:05:08", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 996075, "karma": 0, "karma_critpath": 0, "text": "This update's test gating status has been changed to 'ignored'.", "timestamp": "2019-08-12 08:39:39", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 998518, "karma": -1, "karma_critpath": 0, "text": "mock -r fedora-rawhide-x86_64 --clean\nmock -r fedora-rawhide-x86_64 --install gdb\nprobably same issue what reported churchyard for fedora 30 update\n
\nRunning transaction\n Preparing : 1/1 \n Installing : sqlite-libs-3.29.0-2.fc31.x86_64 1/14 \n Installing : python-setuptools-wheel-41.0.1-4.fc31.noarch 2/14 \n Installing : python-pip-wheel-19.1.1-4.fc31.noarch 3/14 \n Installing : libipt-2.0-3.fc31.x86_64 4/14 \n Installing : libicu-63.2-3.fc31.x86_64 5/14 \n Installing : boost-regex-1.69.0-9.fc31.x86_64 6/14 \n Installing : glib2-2.61.1-3.fc31.x86_64 7/14 \n Installing : libbabeltrace-1.5.7-2.fc31.x86_64 8/14 \n Installing : gdbm-libs-1:1.18-5.fc31.x86_64 9/14 \n Installing : python3-libs-3.7.4-4.fc31.x86_64 10/14 \n Installing : ctags-5.8-26.fc31.x86_64 11/14 \n Installing : source-highlight-3.1.8-25.fc31.x86_64 12/14 \n Installing : gdb-headless-8.3.50.20190802-21.fc31.x86_64 13/14 \n Running scriptlet: gdb-8.3.50.20190802-21.fc31.x86_64 14/14 \nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nerror: %prein(gdb-8.3.50.20190802-21.fc31.x86_64) scriptlet failed, exit status 127\n\nError in PREIN scriptlet in rpm package gdb\nerror: gdb-8.3.50.20190802-21.fc31.x86_64: install failed\nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(glibc-common-2.30-1.fc31.x86_64) scriptlet failed, exit status 127\n\nError in", "timestamp": "2019-08-12 12:55:41", "update_id": 145955, "user_id": 4916, "bug_feedback": [{"karma": 0, "comment_id": 998518, "bug_id": 1264005, "bug": {"bug_id": 1264005, "title": "when dropping privileges secondary user groups are not loaded", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"id": 4916, "name": "pkopkan", "email": "pkopkan@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/6d67471ab3664797b7e9306c764dbf574f49c929dc5de388be7639fbe7a43a3c?s=24&d=retro", "openid": "pkopkan.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}, {"id": 998519, "karma": 0, "karma_critpath": 0, "text": "Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.", "timestamp": "2019-08-12 12:55:42", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 999118, "karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1740421", "timestamp": "2019-08-12 22:26:21", "update_id": 145955, "user_id": 533, "bug_feedback": [{"karma": 0, "comment_id": 999118, "bug_id": 1264005, "bug": {"bug_id": 1264005, "title": "when dropping privileges secondary user groups are not loaded", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"id": 533, "name": "churchyard", "email": "mhroncok@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/be04089b86493c2558f079c0b27b79d2b1f33e5aa8f478dc803118fc12b23c09?s=24&d=retro", "openid": "churchyard.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "fesco"}, {"name": "sysadmin-badges"}, {"name": "modularity-wg"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}, {"id": 999496, "karma": 0, "karma_critpath": 0, "text": "praiskup edited this update.", "timestamp": "2019-08-13 07:55:33", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 1002632, "karma": 0, "karma_critpath": 0, "text": "This update can be pushed to stable now if the maintainer wishes", "timestamp": "2019-08-16 01:36:08", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}, {"id": 1004262, "karma": 0, "karma_critpath": 0, "text": "This update has been unpushed.", "timestamp": "2019-08-17 01:38:41", "update_id": 145955, "user_id": 1488, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 1488, "name": "qulogic", "email": "quantum.analyst@gmail.com", "avatar": "https://seccdn.libravatar.org/avatar/6e74fc668b2435e951b2cee932da81c3080455d60e3bde706bedb49716e99fbc?s=24&d=retro", "openid": "qulogic.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "fedora-contributor"}, {"name": "ask-fedora"}, {"name": "ipausers"}, {"name": "python-packagers-sig"}, {"name": "signed_fpca"}, {"name": "haskell"}, {"name": "haskell-lang-sig"}, {"name": "r-maint-sig"}]}}, {"id": 1004263, "karma": 0, "karma_critpath": 0, "text": "Well bugger, I didn't mean to do that; was trying to see what was going on with the search button not working.", "timestamp": "2019-08-17 01:39:44", "update_id": 145955, "user_id": 1488, "bug_feedback": [{"karma": 0, "comment_id": 1004263, "bug_id": 1264005, "bug": {"bug_id": 1264005, "title": "when dropping privileges secondary user groups are not loaded", "security": false, "parent": false}}], "testcase_feedback": [], "user": {"id": 1488, "name": "qulogic", "email": "quantum.analyst@gmail.com", "avatar": "https://seccdn.libravatar.org/avatar/6e74fc668b2435e951b2cee932da81c3080455d60e3bde706bedb49716e99fbc?s=24&d=retro", "openid": "qulogic.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "fedora-contributor"}, {"name": "ask-fedora"}, {"name": "ipausers"}, {"name": "python-packagers-sig"}, {"name": "signed_fpca"}, {"name": "haskell"}, {"name": "haskell-lang-sig"}, {"name": "r-maint-sig"}]}}, {"id": 1004264, "karma": 0, "karma_critpath": 0, "text": "This update has been submitted for testing by qulogic. ", "timestamp": "2019-08-17 01:40:05", "update_id": 145955, "user_id": 91, "bug_feedback": [], "testcase_feedback": [], "user": {"id": 91, "name": "bodhi", "email": null, "avatar": "https://apps.fedoraproject.org/img/icons/bodhi-24.png", "openid": "bodhi.id.stg.fedoraproject.org", "groups": []}}], "builds": [{"nvr": "mock-1.4.17-1.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 0}, {"nvr": "mock-core-configs-30.5-1.fc29", "signed": true, "release_id": 23, "type": "rpm", "epoch": 0}], "bugs": [{"bug_id": 1264005, "title": "when dropping privileges secondary user groups are not loaded", "security": false, "parent": false, "feedback": [{"karma": 0, "comment_id": 999119, "bug_id": 1264005, "comment": {"id": 999119, "karma": -1, "karma_critpath": 0, "text": "https://bugzilla.redhat.com/show_bug.cgi?id=1740421", "timestamp": "2019-08-12 22:26:25", "update_id": 145957, "user_id": 533, "testcase_feedback": [], "user": {"id": 533, "name": "churchyard", "email": "mhroncok@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/be04089b86493c2558f079c0b27b79d2b1f33e5aa8f478dc803118fc12b23c09?s=24&d=retro", "openid": "churchyard.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "fesco"}, {"name": "sysadmin-badges"}, {"name": "modularity-wg"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 999486, "bug_id": 1264005, "comment": {"id": 999486, "karma": 0, "karma_critpath": 0, "text": "I disabled the autopush on time, fyi. It seems like we could break copr/koji builders by this.", "timestamp": "2019-08-13 07:53:57", "update_id": 145957, "user_id": 827, "testcase_feedback": [], "user": {"id": 827, "name": "praiskup", "email": "praiskup@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/d254ec6eca183812d74fb715997263fd44910b7345ad4e02be8c430ccf800382?s=24&d=retro", "openid": "praiskup.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "sysadmin-noc"}, {"name": "db-sig"}, {"name": "communishift"}, {"name": "pgjdbc-sig"}, {"name": "sysadmin"}, {"name": "aws-copr"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "copr-sig"}, {"name": "gitmock"}, {"name": "sysadmin-copr"}, {"name": "sysadmin-dns"}, {"name": "libarchive-sig"}, {"name": "gitcodescan-diff"}, {"name": "fedorabugs"}, {"name": "gitcopr"}]}}}, {"karma": 0, "comment_id": 1000788, "bug_id": 1264005, "comment": {"id": 1000788, "karma": -1, "karma_critpath": 0, "text": "It looks like all (?) RPM scriptlets fail to run because SELinux blocks access to /usr/bin/bash.\n\nRunning `clean --scrub all` makes it work once, but subsequent runs without running `clean --scrub all` inbetween fail.", "timestamp": "2019-08-14 11:46:38", "update_id": 145957, "user_id": 388, "testcase_feedback": [], "user": {"id": 388, "name": "decathorpe", "email": "decathorpe@gmail.com", "avatar": "https://seccdn.libravatar.org/avatar/030b4149db032536d2f827fffd0d0bc8e07544397c68af1d36c99a002f188e9e?s=24&d=retro", "openid": "decathorpe.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "fesco"}, {"name": "rust-sig"}, {"name": "packaging-committee"}, {"name": "libreoffice-sig"}, {"name": "multimedia-sig"}, {"name": "diversity-pride"}]}}}, {"karma": 0, "comment_id": 1001273, "bug_id": 1264005, "comment": {"id": 1001273, "karma": -1, "karma_critpath": 0, "text": "My chroots have all CCache enabled and it fails with:\n```\nRunning transaction\n Preparing : 1/1 \n Running scriptlet: ccache-3.7.1-2.fc31.x86_64 1/1 \nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nerror: %prein(ccache-3.7.1-2.fc31.x86_64) scriptlet failed, exit status 127\n\nError in PREIN scriptlet in rpm package ccache\n Verifying : ccache-3.7.1-2.fc31.x86_64 1/1 \n\nFailed:\n ccache-3.7.1-2.fc31.x86_64\n```\n\nI've got failure with dnf, useradd and groupadd when installing packages in the chroot.", "timestamp": "2019-08-14 19:00:48", "update_id": 145957, "user_id": 3743, "testcase_feedback": [], "user": {"id": 3743, "name": "eclipseo", "email": "zebob.m@gmail.com", "avatar": "https://seccdn.libravatar.org/avatar/b4880bad551a88a571583cf78e56be08eae35cdd613b5b6a70c2693deb2c71ae?s=24&d=retro", "openid": "eclipseo.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "signed_fpca"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 1002123, "bug_id": 1264005, "comment": {"id": 1002123, "karma": -1, "karma_critpath": 0, "text": "Same as other, this update causes SELinux denials that prevent scriptlets in the chroot from running.", "timestamp": "2019-08-15 14:53:06", "update_id": 145957, "user_id": 3717, "testcase_feedback": [], "user": {"id": 3717, "name": "carlwgeorge", "email": "carl@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/d26b022c32cac2998ac4a953a75c0bd616084d96e94da291898055c8a5738c21?s=24&d=retro", "openid": "carlwgeorge.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "python-sig"}, {"name": "infra-sig"}, {"name": "provenpackager"}, {"name": "sysadmin-web"}, {"name": "epel-packagers-sig"}, {"name": "fedorabugs"}, {"name": "centosproject-email-aliases"}, {"name": "fedora-contributor"}, {"name": "caddy"}, {"name": "ipausers"}, {"name": "sig-extras"}, {"name": "centos-rcm"}, {"name": "qa_users"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}]}}}, {"karma": 0, "comment_id": 1004263, "bug_id": 1264005, "comment": {"id": 1004263, "karma": 0, "karma_critpath": 0, "text": "Well bugger, I didn't mean to do that; was trying to see what was going on with the search button not working.", "timestamp": "2019-08-17 01:39:44", "update_id": 145955, "user_id": 1488, "testcase_feedback": [], "user": {"id": 1488, "name": "qulogic", "email": "quantum.analyst@gmail.com", "avatar": "https://seccdn.libravatar.org/avatar/6e74fc668b2435e951b2cee932da81c3080455d60e3bde706bedb49716e99fbc?s=24&d=retro", "openid": "qulogic.id.stg.fedoraproject.org", "groups": [{"name": "packager"}, {"name": "provenpackager"}, {"name": "python-sig"}, {"name": "fedorabugs"}, {"name": "go-sig"}, {"name": "fedora-contributor"}, {"name": "ask-fedora"}, {"name": "ipausers"}, {"name": "python-packagers-sig"}, {"name": "signed_fpca"}, {"name": "haskell"}, {"name": "haskell-lang-sig"}, {"name": "r-maint-sig"}]}}}, {"karma": 0, "comment_id": 993151, "bug_id": 1264005, "comment": {"id": 993151, "karma": -1, "karma_critpath": 0, "text": "Was this update ever tested? Mock poorly fails on RHEL 7.7 with SELinux errors when building a package:\n\n```\ntype=AVC msg=audit(1565368068.535:11095): avc: denied { read } for pid=46206 comm=\"groupadd\" name=\"run\" dev=\"dm-0\" ino=800267 scontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=lnk_file permissive=0\ntype=SYSCALL msg=audit(1565368068.535:11095): arch=x86_64 syscall=connect success=no exit=EACCES a0=4 a1=7ffe52230040 a2=6e a3=40 items=0 ppid=46205 pid=46206 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=groupadd exe=/usr/sbin/groupadd subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 key=(null)\ntype=AVC msg=audit(1565368069.966:11119): avc: denied { write } for pid=46244 comm=\"groupadd\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=AVC msg=audit(1565368069.966:11119): avc: denied { write } for pid=46244 comm=\"groupadd\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=SYSCALL msg=audit(1565368069.966:11119): arch=x86_64 syscall=execve success=yes exit=0 a0=1a327b0 a1=1a2fd30 a2=1a31be0 a3=7ffda2580a60 items=0 ppid=46238 pid=46244 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=groupadd exe=/usr/sbin/groupadd subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 key=(null)\ntype=AVC msg=audit(1565368070.38:11132): avc: denied { write } for pid=46260 comm=\"useradd\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=AVC msg=audit(1565368070.38:11132): avc: denied { write } for pid=46260 comm=\"useradd\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=SYSCALL msg=audit(1565368070.38:11132): arch=x86_64 syscall=execve success=yes exit=0 a0=1a33270 a1=1a32d50 a2=1a31be0 a3=7ffda2580a60 items=0 ppid=46238 pid=46260 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=useradd exe=/usr/sbin/useradd subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 key=(null)\ntype=AVC msg=audit(1565368070.44:11133): avc: denied { read } for pid=46260 comm=\"useradd\" name=\"run\" dev=\"dm-0\" ino=800267 scontext=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=lnk_file permissive=0\ntype=SYSCALL msg=audit(1565368070.44:11133): arch=x86_64 syscall=connect success=no exit=EACCES a0=5 a1=7ffd92b62af0 a2=6e a3=11 items=0 ppid=46238 pid=46260 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=useradd exe=/usr/sbin/useradd subj=unconfined_u:unconfined_r:useradd_t:s0-s0:c0.c1023 key=(null)\ntype=AVC msg=audit(1565368096.180:11209): avc: denied { write } for pid=46732 comm=\"groupadd\" name=\"group\" dev=\"dm-0\" ino=806120 scontext=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:etc_t:s0 tclass=file permissive=0\ntype=SYSCALL msg=audit(1565368096.180:11209): arch=x86_64 syscall=open success=no exit=EACCES a0=56463bb7f5a0 a1=20902 a2=0 a3=8 items=0 ppid=46730 pid=46732 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=groupadd exe=/usr/sbin/groupadd subj=unconfined_u:unconfined_r:groupadd_t:s0-s0:c0.c1023 key=(null)\ntype=AVC msg=audit(1565368103.576:11285): avc: denied { write } for pid=46804 comm=\"restorecon\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=AVC msg=audit(1565368103.576:11285): avc: denied { write } for pid=46804 comm=\"restorecon\" path=\"/dev/null\" dev=\"dm-0\" ino=800206 scontext=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:mock_var_lib_t:s0 tclass=chr_file permissive=0\ntype=SYSCALL msg=audit(1565368103.576:11285): arch=x86_64 syscall=execve success=yes exit=0 a0=f64170 a1=f63b10 a2=f63920 a3=7ffd776df720 items=0 ppid=46799 pid=46804 auid=3000051 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1118 comm=restorecon exe=/usr/sbin/setfiles subj=unconfined_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 key=(null)\n```\n\nDowngrading mock-1.4.17-1.el7.noarch to mock-1.4.16-1.el7.noarch solves the issue, thus this is not a RHEL 7.7, but a mock issue.", "timestamp": "2019-08-09 16:39:14", "update_id": 145956, "user_id": 172, "testcase_feedback": [], "user": {"id": 172, "name": "robert", "email": "redhat@linuxnetz.de", "avatar": "https://seccdn.libravatar.org/avatar/5b9160cfcf71422366f143489b64ed9b421810a1d9ab3b3fc9b7ae1e66bda438?s=24&d=retro", "openid": "robert.id.stg.fedoraproject.org", "groups": [{"name": "proventesters"}, {"name": "provenpackager"}, {"name": "packager"}, {"name": "ipausers"}, {"name": "ambassadors"}, {"name": "campusambassadors"}, {"name": "gitfedora-web"}, {"name": "fedora-contributor"}, {"name": "advocates"}, {"name": "fedorabugs"}, {"name": "gitsecurity-spin"}, {"name": "signed_fpca"}, {"name": "gitfama"}, {"name": "epel-packagers-sig"}, {"name": "web"}, {"name": "clamav"}]}}}, {"karma": 0, "comment_id": 1015470, "bug_id": 1264005, "comment": {"id": 1015470, "karma": 1, "karma_critpath": 0, "text": "This finally has looping DynamicBuildRequires and the SELinux thing is solved as well. Thank You.", "timestamp": "2019-08-27 13:11:24", "update_id": 149790, "user_id": 533, "testcase_feedback": [], "user": {"id": 533, "name": "churchyard", "email": "mhroncok@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/be04089b86493c2558f079c0b27b79d2b1f33e5aa8f478dc803118fc12b23c09?s=24&d=retro", "openid": "churchyard.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "signed_fpca"}, {"name": "3d-printing-sig"}, {"name": "python-packagers-sig"}, {"name": "fedora-contributor"}, {"name": "fesco"}, {"name": "sysadmin-badges"}, {"name": "modularity-wg"}, {"name": "ipausers"}, {"name": "sysadmin"}, {"name": "lua-packagers-sig"}, {"name": "fedorabugs"}, {"name": "cvsadmin"}, {"name": "ambassadors"}, {"name": "packaging-committee"}, {"name": "advocates"}]}}}, {"karma": 0, "comment_id": 993775, "bug_id": 1264005, "comment": {"id": 993775, "karma": 1, "karma_critpath": 0, "text": "", "timestamp": "2019-08-10 13:40:29", "update_id": 145955, "user_id": 119, "testcase_feedback": [], "user": {"id": 119, "name": "zbyszek", "email": "zbyszek@in.waw.pl", "avatar": "https://seccdn.libravatar.org/avatar/75e36ea1fdb970398aa9b00a23ab502648e060fb1f569d96cd0fa063aa2147d4?s=24&d=retro", "openid": "zbyszek.id.stg.fedoraproject.org", "groups": [{"name": "provenpackager"}, {"name": "packager"}, {"name": "python-sig"}, {"name": "neuro-sig"}, {"name": "fedorabugs"}, {"name": "signed_fpca"}, {"name": "python-packagers-sig"}, {"name": "fesco"}, {"name": "gitinitscripts"}, {"name": "ipausers"}, {"name": "fedora-contributor"}, {"name": "scitech_sig"}, {"name": "rust-sig"}]}}}, {"karma": 0, "comment_id": 993783, "bug_id": 1264005, "comment": {"id": 993783, "karma": -1, "karma_critpath": 0, "text": "```\n$ mock -r fedora-rawhide-x86_64 --enablerepo=local init\n...\n\n(AVC denial notification when installing packages)\n\n$ sealert -l '*'\n...\nSELinux is preventing dnf from entrypoint access on the file /usr/bin/bash.\n\n***** Plugin restorecon (99.5 confidence) suggests ************************\n\nIf you want to fix the label. \n/usr/bin/bash default label should be shell_exec_t.\nThen you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.\nDo\n# /sbin/restorecon -v /usr/bin/bash\n\n***** Plugin catchall (1.49 confidence) suggests **************************\n\nIf you believe that dnf should be allowed entrypoint access on the bash file by default.\nThen you should report this as a bug.\nYou can generate a local policy module to allow this access.\nDo\nallow this access for now by executing:\n# ausearch -c 'dnf' --raw | audit2allow -M my-dnf\n# semodule -X 300 -i my-dnf.pp\n\n\nAdditional Information:\nSource Context unconfined_u:unconfined_r:rpm_script_t:s0-s0:c0.c1\n 023\nTarget Context unconfined_u:object_r:mock_var_lib_t:s0\nTarget Objects /usr/bin/bash [ file ]\nSource dnf\nSource Path dnf\nPortscriptlet in rpm package gdb\nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(info-6.6-2.fc31.x86_64) scriptlet failed, exit status 127\n\nError in scriptlet in rpm package gdb\n Running scriptlet: glib2-2.61.1-3.fc31.x86_64 14/14 \nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(glib2-2.61.1-3.fc31.x86_64) scriptlet failed, exit status 127\n\nError in scriptlet in rpm package glib2\n Verifying : boost-regex-1.69.0-9.fc31.x86_64 1/14 \n Verifying : ctags-5.8-26.fc31.x86_64 2/14 \n Verifying : gdb-8.3.50.20190802-21.fc31.x86_64 3/14 \n Verifying : gdb-headless-8.3.50.20190802-21.fc31.x86_64 4/14 \n Verifying : gdbm-libs-1:1.18-5.fc31.x86_64 5/14 \n Verifying : glib2-2.61.1-3.fc31.x86_64 6/14 \n Verifying : libbabeltrace-1.5.7-2.fc31.x86_64 7/14 \n Verifying : libicu-63.2-3.fc31.x86_64 8/14 \n Verifying : libipt-2.0-3.fc31.x86_64 9/14 \n Verifying : python-pip-wheel-19.1.1-4.fc31.noarch 10/14 \n Verifying : python-setuptools-wheel-41.0.1-4.fc31.noarch 11/14 \n Verifying : python3-libs-3.7.4-4.fc31.x86_64 12/14 \n Verifying : source-highlight-3.1.8-25.fc31.x86_64 13/14 \n Verifying : sqlite-libs-3.29.0-2.fc31.x86_64 14/14 \n\nInstalled:\n boost-regex-1.69.0-9.fc31.x86_64 ctags-5.8-26.fc31.x86_64 gdb-headless-8.3.50.20190802-21.fc31.x86_64 \n gdbm-libs-1:1.18-5.fc31.x86_64 glib2-2.61.1-3.fc31.x86_64 libbabeltrace-1.5.7-2.fc31.x86_64 \n libicu-63.2-3.fc31.x86_64 libipt-2.0-3.fc31.x86_64 python-pip-wheel-19.1.1-4.fc31.noarch \n python-setuptools-wheel-41.0.1-4.fc31.noarch python3-libs-3.7.4-4.fc31.x86_64 source-highlight-3.1.8-25.fc31.x86_64 \n sqlite-libs-3.29.0-2.fc31.x86_64 \n\nFailed:\n gdb-8.3.50.20190802-21.fc31.x86_64 \n\nError: Transaction failed\nERROR: Command failed: \n # /usr/bin/dnf --installroot /var/lib/mock/fedora-rawhide-x86_64/root/ --releasever 31 --setopt=deltarpm=False --allowerasing --disableplugin=local --disableplugin=spacewalk install gdb\n
\nRunning transaction\n Preparing : 1/1 \n Installing : sqlite-libs-3.29.0-2.fc31.x86_64 1/14 \n Installing : python-setuptools-wheel-41.0.1-4.fc31.noarch 2/14 \n Installing : python-pip-wheel-19.1.1-4.fc31.noarch 3/14 \n Installing : libipt-2.0-3.fc31.x86_64 4/14 \n Installing : libicu-63.2-3.fc31.x86_64 5/14 \n Installing : boost-regex-1.69.0-9.fc31.x86_64 6/14 \n Installing : glib2-2.61.1-3.fc31.x86_64 7/14 \n Installing : libbabeltrace-1.5.7-2.fc31.x86_64 8/14 \n Installing : gdbm-libs-1:1.18-5.fc31.x86_64 9/14 \n Installing : python3-libs-3.7.4-4.fc31.x86_64 10/14 \n Installing : ctags-5.8-26.fc31.x86_64 11/14 \n Installing : source-highlight-3.1.8-25.fc31.x86_64 12/14 \n Installing : gdb-headless-8.3.50.20190802-21.fc31.x86_64 13/14 \n Running scriptlet: gdb-8.3.50.20190802-21.fc31.x86_64 14/14 \nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nerror: %prein(gdb-8.3.50.20190802-21.fc31.x86_64) scriptlet failed, exit status 127\n\nError in PREIN scriptlet in rpm package gdb\nerror: gdb-8.3.50.20190802-21.fc31.x86_64: install failed\nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(glibc-common-2.30-1.fc31.x86_64) scriptlet failed, exit status 127\n\nError in", "timestamp": "2019-08-12 12:55:41", "update_id": 145955, "user_id": 4916, "testcase_feedback": [], "user": {"id": 4916, "name": "pkopkan", "email": "pkopkan@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/6d67471ab3664797b7e9306c764dbf574f49c929dc5de388be7639fbe7a43a3c?s=24&d=retro", "openid": "pkopkan.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 999060, "bug_id": 1264005, "comment": {"id": 999060, "karma": 0, "karma_critpath": 0, "text": "@robert which command did you use ?\n\nI saw a different AVC and here is a workaround\n```\nsh# cat mock-workaround.cil \n(roleattributeset cil_gen_require system_r)\n(typeattributeset cil_gen_require mock_var_lib_t)\n(typeattributeset cil_gen_require rpm_script_t)\n(allow rpm_script_t mock_var_lib_t (file (entrypoint)))\n\nsh# semodule -i mock-workaround.cil\n```\n\nBut I was not able to reproduce issue with groupadd or useradd. ", "timestamp": "2019-08-12 21:28:24", "update_id": 145956, "user_id": 809, "testcase_feedback": [], "user": {"id": 809, "name": "lslebodn", "email": "lslebodn@redhat.com", "avatar": "https://seccdn.libravatar.org/avatar/7b5254b85578ef9d3c467a361fe5ea3d95a0a4ec1ba2e57625fe661343d8f226?s=24&d=retro", "openid": "lslebodn.id.stg.fedoraproject.org", "groups": [{"name": "packager"}]}}}, {"karma": 0, "comment_id": 999111, "bug_id": 1264005, "comment": {"id": 999111, "karma": 0, "karma_critpath": 0, "text": "```\nmock -r epel-7-x86_64 rebuildscriptlet in rpm package gdb\nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(info-6.6-2.fc31.x86_64) scriptlet failed, exit status 127\n\nError in scriptlet in rpm package gdb\n Running scriptlet: glib2-2.61.1-3.fc31.x86_64 14/14 \nerror: failed to exec scriptlet interpreter /bin/sh: Permission denied\nwarning: %triggerin(glib2-2.61.1-3.fc31.x86_64) scriptlet failed, exit status 127\n\nError in scriptlet in rpm package glib2\n Verifying : boost-regex-1.69.0-9.fc31.x86_64 1/14 \n Verifying : ctags-5.8-26.fc31.x86_64 2/14 \n Verifying : gdb-8.3.50.20190802-21.fc31.x86_64 3/14 \n Verifying : gdb-headless-8.3.50.20190802-21.fc31.x86_64 4/14 \n Verifying : gdbm-libs-1:1.18-5.fc31.x86_64 5/14 \n Verifying : glib2-2.61.1-3.fc31.x86_64 6/14 \n Verifying : libbabeltrace-1.5.7-2.fc31.x86_64 7/14 \n Verifying : libicu-63.2-3.fc31.x86_64 8/14 \n Verifying : libipt-2.0-3.fc31.x86_64 9/14 \n Verifying : python-pip-wheel-19.1.1-4.fc31.noarch 10/14 \n Verifying : python-setuptools-wheel-41.0.1-4.fc31.noarch 11/14 \n Verifying : python3-libs-3.7.4-4.fc31.x86_64 12/14 \n Verifying : source-highlight-3.1.8-25.fc31.x86_64 13/14 \n Verifying : sqlite-libs-3.29.0-2.fc31.x86_64 14/14 \n\nInstalled:\n boost-regex-1.69.0-9.fc31.x86_64 ctags-5.8-26.fc31.x86_64 gdb-headless-8.3.50.20190802-21.fc31.x86_64 \n gdbm-libs-1:1.18-5.fc31.x86_64 glib2-2.61.1-3.fc31.x86_64 libbabeltrace-1.5.7-2.fc31.x86_64 \n libicu-63.2-3.fc31.x86_64 libipt-2.0-3.fc31.x86_64 python-pip-wheel-19.1.1-4.fc31.noarch \n python-setuptools-wheel-41.0.1-4.fc31.noarch python3-libs-3.7.4-4.fc31.x86_64 source-highlight-3.1.8-25.fc31.x86_64 \n sqlite-libs-3.29.0-2.fc31.x86_64 \n\nFailed:\n gdb-8.3.50.20190802-21.fc31.x86_64 \n\nError: Transaction failed\nERROR: Command failed: \n # /usr/bin/dnf --installroot /var/lib/mock/fedora-rawhide-x86_64/root/ --releasever 31 --setopt=deltarpm=False --allowerasing --disableplugin=local --disableplugin=spacewalk install gdb\n