Back to bug 2130204

Who When What Removed Added
Red Hat Bugzilla 2022-09-27 13:40:14 UTC Pool ID sst_security_selinux_rhel_9
Red Hat One Jira (issues.redhat.com) 2022-09-27 13:56:04 UTC Link ID Red Hat Issue Tracker RHELPLAN-135026
Zdenek Pytela 2022-09-27 14:29:45 UTC Link ID Red Hat Bugzilla 1887572
Doc Type --- If docs needed, set a value
Milos Malik 2022-09-30 08:36:39 UTC QA Contact qe-baseos-security mmalik
Red Hat One Jira (issues.redhat.com) 2022-09-30 13:22:49 UTC Link ID Red Hat Issue Tracker RHELPLAN-135026
Red Hat One Jira (issues.redhat.com) 2022-10-06 15:04:07 UTC Link ID Red Hat Issue Tracker RHELPLAN-135026
Zdenek Pytela 2022-10-10 13:55:39 UTC Priority unspecified high
Target Release --- 9.2
Status NEW ASSIGNED
Keywords Triaged
Nikola Knazekova 2022-10-13 12:15:59 UTC CC nknazeko
Nikola Knazekova 2022-10-13 16:09:05 UTC Status ASSIGNED POST
Nikola Knazekova 2022-10-14 11:35:07 UTC Fixed In Version selinux-policy-34.1.44-1.el9
Status POST MODIFIED
errata-xmlrpc 2022-10-17 16:22:46 UTC Status MODIFIED ON_QA
Milos Malik 2022-10-20 09:01:10 UTC Status ON_QA VERIFIED
Zdenek Pytela 2022-11-14 11:22:52 UTC Doc Type If docs needed, set a value Bug Fix
Nikola Knazekova 2022-12-12 12:13:30 UTC Doc Text Cause: SELinux denies subscription-manager package to execute gpg and gets blocked.

Consequence: When a repository configuration changes to "repo_gpgcheck=1", the rhsmcertd worker executes gpg or gpgsm to perform a GPG signature check on this repository's metadata.

Fix: Allow rhsmcertd execute gpg

Result: No SELinux denials
Red Hat Bugzilla 2023-04-15 10:51:29 UTC CC ssekidde
errata-xmlrpc 2023-05-09 00:24:58 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2023-05-09 08:16:34 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2023-05-09 08:16:34 UTC
errata-xmlrpc 2023-05-09 08:16:50 UTC Link ID Red Hat Product Errata RHBA-2023:2483
Welterlen Benoit 2023-07-17 08:08:29 UTC CC bwelterl
Dependent Products Red Hat Certificate System
Robert Scheck 2023-07-18 10:47:06 UTC CC redhat-bugzilla, robert.scheck

Back to bug 2130204