Bug 1011588

Summary: sandboxes terminate quickly after upgrade to 2.1.14-46.5
Product: [Fedora] Fedora Reporter: John T. Rose <inode0>
Component: policycoreutilsAssignee: Daniel Walsh <dwalsh>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: unspecified Docs Contact:
Priority: unspecified    
Version: 19CC: amit.shah, bressers, dimitris, dwalsh, luto, mgrepl, pcfe
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: policycoreutils-2.1.14-46.6.fc19 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
: 1029624 (view as bug list) Environment:
Last Closed: 2013-10-08 11:25:04 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1029624    

Description John T. Rose 2013-09-24 15:08:16 UTC
Description of problem:

After updating policycoreutils, policycoreutils-python and policycoreutils-sandbox to 2.1.14-46.5 all sandboxes seem to die quickly without output.

Reverting these packages to 2.1.14-45 restores working sandboxes.

Version-Release number of selected component (if applicable):

policycoreutils-sandbox-2.1.14-46.5.fc19.i686
policycoreutils-2.1.14-46.5.fc19.i686
policycoreutils-python-2.1.14-46.5.fc19.i686

How reproducible:

Duplicated on multiple machines.

Steps to Reproduce:
1. Upgrade to 2.1.14-46.5
2. sandbox -X firefox

Actual results:

Quietly returns almost instantly without opening firefox.

Expected results:

Runs firefox in a sandbox.

Additional info:

Comment 1 Daniel Walsh 2013-09-24 15:53:18 UTC
Could you try 

# chmod 4755 /usr/sbin/seunshare

And see if this fixes the problem?

Comment 2 John T. Rose 2013-09-24 16:01:47 UTC
yes, it does fix the problem.

Comment 3 Daniel Walsh 2013-09-24 16:24:52 UTC
Ok there seems to be some new file capability that we currently do not allow.

Comment 4 Daniel Walsh 2013-09-24 19:35:12 UTC
*** Bug 986079 has been marked as a duplicate of this bug. ***

Comment 5 Amit Shah 2013-09-30 04:24:39 UTC
*** Bug 1013273 has been marked as a duplicate of this bug. ***

Comment 6 Fedora Update System 2013-10-04 19:07:58 UTC
policycoreutils-2.1.14-46.6.fc19 has been submitted as an update for Fedora 19.
https://admin.fedoraproject.org/updates/policycoreutils-2.1.14-46.6.fc19

Comment 7 Fedora Update System 2013-10-06 01:35:53 UTC
Package policycoreutils-2.1.14-46.6.fc19:
* should fix your issue,
* was pushed to the Fedora 19 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing policycoreutils-2.1.14-46.6.fc19'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2013-18394/policycoreutils-2.1.14-46.6.fc19
then log in and leave karma (feedback).

Comment 8 Fedora Update System 2013-10-08 11:25:04 UTC
policycoreutils-2.1.14-46.6.fc19 has been pushed to the Fedora 19 stable repository.  If problems still persist, please make note of it in this bug report.