Bug 1121806

Summary:	/etc/passwd- , /etc/group- and /etc/.updated mislabeled in Fedora 21 and Rawhide live images
Product:	[Fedora] Fedora	Reporter:	Adam Williamson <awilliam>
Component:	systemd	Assignee:	systemd-maint
Status:	CLOSED ERRATA	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	urgent	Docs Contact:
Priority:	unspecified
Version:	21	CC:	johannbg, lnykryn, msekleta, robatino, s, systemd-maint, vpavlin, zbyszek
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	All
Whiteboard:
Fixed In Version:	systemd-215-5.fc21	Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-07-26 18:54:42 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1043119

Description Adam Williamson 2014-07-21 23:35:18 UTC

This bug is split off from https://bugzilla.redhat.com/show_bug.cgi?id=1121301 , as the mislabeling of three files in /etc is caused by systemd (according to Zbigniew) and seems to be a separate issue from the quasi-random mislabeling of hundreds of files in /usr and /var.

So, this bug covers the fact that since 2014-07-08, every F21 and F22 branch live image generated (the auto-generated nightlies, and the manually built Alpha TC1/TC2 compose attempts) has three mislabeled files in /etc:

/etc/passwd-
/etc/group-
/etc/.updated

restorecon reset /etc/.updated context system_u:object_r:etc_runtime_t:s0->system_u:object_r:etc_t:s0
restorecon reset /etc/passwd- context system_u:object_r:tmpfs_t:s0->system_u:object_r:passwd_file_t:s0
restorecon reset /etc/group- context system_u:object_r:tmpfs_t:s0->system_u:object_r:passwd_file_t:s0

the mislabelling of /etc/passwd- and /etc/group- is especially serious, as it causes the live images to fail to boot without enforcing=0 being passed. Hence, nominating this as an Alpha release blocker per https://fedoraproject.org/wiki/Fedora_21_Alpha_Release_Criteria#Release-blocking_images_must_boot , "All release-blocking images must boot in their supported configurations."

Comment 1 Zbigniew Jędrzejewski-Szmek 2014-07-22 12:18:34 UTC

We're not doing bodhi updates yet, right? Should be fixed in systemd-215-5.fc21.