https://github.com/SELinuxProject/selinux/wiki/Releases#release-34
https://github.com/SELinuxProject/selinux/wiki/Releases#release-34
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2022-0feca8b2c9Please login to add feedback.
| 0 | 1 | Test Case policycoreutils semanage |
| 0 | 1 | Test Case policycoreutils semodule |
This update's test gating status has been changed to 'waiting'.
This update has obsoleted checkpolicy-3.4-1.fc37, and has inherited its bugs and notes.
This update's test gating status has been changed to 'failed'.
Live images built with this still boot to a login screen. Here's an affected KDE live image: https://openqa.stg.fedoraproject.org/tests/1819100/asset/iso/01819099-Fedora-KDE-Live-x86_64-FEDORA-2022-0feca8b2c9.iso
Bodhi is disabling automatic push to stable due to negative karma. The maintainer may push manually if they determine that the issue is not severe.
If I boot with
enforcing=0, I get to a desktop as expected. These AVCs are shown by ausearch and the journal:time->Wed May 25 21:30:13 2022 type=AVC msg=audit(1653528613.466:247): avc: denied { transition } for pid=1417 comm="(systemd)" path="/usr/lib/systemd/systemd" dev="dm-0" ino=8247 scontext=system_u:system_r:kernel_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_t:s0 tclass=process permissive=1
time->Wed May 25 21:30:13 2022 type=AVC msg=audit(1653528613.467:248): avc: denied { entrypoint } for pid=1417 comm="(systemd)" path="/usr/lib/systemd/systemd" dev="dm-0" ino=8247 scontext=unconfined_u:unconfined_r:unconfined_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
Great, thanks. All files in the image without selinux label. How 's the image created? Are the logs available somewhere?
Ok, I've found it. @adamwill Thanks! for the report, I'm going to fix it in the next update
plautrba edited this update.
New build(s):
Removed build(s):
Karma has been reset.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'failed'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'waiting'.
This update's test gating status has been changed to 'passed'.
This update has been submitted for stable by adamwill.
This not being in stable now clashes with the Python 3.11 rebuilds. We need this in stable, what do we do?
I don't know. I expected it would go to stable after I've added libselinux-3.4-2 and waived all test. 3 days ago I noticed that nothing happened but there was no "push to stable" button - https://pagure.io/releng/issue/10832 . 2 days ago @adamwill push it using cli so it's "testing -> stable" now.
kevin edited this update.
kevin edited this update.
humaton edited this update.
This update has been submitted for stable by bodhi