Update selinux policy for f34 and up.
sudo dnf upgrade --refresh --advisory=FEDORA-2021-0f39cb8d2e
This update has been submitted for testing by hobbes1069.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update has been pushed to testing.
Fixes most of the SELinux issues but as I use some non-default jails, I also get these:
type=AVC msg=audit(1623327223.709:6536): avc: denied { watch } for pid=118968 comm="fail2ban-server" path="/var/log/secure" dev="dm-0" ino=662190 scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file permissive=0 type=AVC msg=audit(1623327223.713:6537): avc: denied { watch } for pid=118968 comm="fail2ban-server" path="/var/log/httpd" dev="dm-0" ino=658553 scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:httpd_log_t:s0 tclass=dir permissive=0 type=AVC msg=audit(1623327223.713:6538): avc: denied { watch } for pid=118968 comm="fail2ban-server" path="/var/log/httpd/access_log" dev="dm-0" ino=662142 scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:httpd_log_t:s0 tclass=file permissive=0
Seems to fix #1943696. I see another strange AVC which I need to investigate further.
time->Sat Jun 12 10:18:17 2021 type=AVC msg=audit(1623485897.973:885795): avc: denied { execmem } for pid=850228 comm="grep" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:system_r:fail2ban_t:s0 tclass=process permissive=0
That seems unrelated though, so I'm still giving positive karma.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.
Please login to add feedback.
Confirm request to re-trigger tests.
This update has been submitted for testing by hobbes1069.
This update's test gating status has been changed to 'ignored'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'ignored'.
This update has been pushed to testing.
Fixes most of the SELinux issues but as I use some non-default jails, I also get these:
Seems to fix #1943696. I see another strange AVC which I need to investigate further.
That seems unrelated though, so I'm still giving positive karma.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.