Bug 1459081
Summary: | SELinux is preventing abrt-server from using the 'dac_read_search' capabilities. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Bruno Javier Blasco Smaranda <brunch875> |
Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
Status: | CLOSED ERRATA | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 27 | CC: | amessina, awilliam, christian.groove, dominick.grift, dwalsh, fran, iliketurtlesbro, jfrieben, kparal, lvrabec, mgrepl, plautrba, pmoore, reklov, rxguy, ssekidde |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | AcceptedBlocker abrt_hash:e63e68d17babf67f0299ac03983df2da107f452b8c57bc80e299cf3bfdb5bd0c;VARIANT_ID=workstation; | ||
Fixed In Version: | selinux-policy-3.13.1-276.fc27 selinux-policy-3.13.1-283.4.fc27 | Doc Type: | If docs needed, set a value |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2017-09-30 06:49:51 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 1396704 |
Description
Bruno Javier Blasco Smaranda
2017-06-06 09:05:38 UTC
*** Bug 1459078 has been marked as a duplicate of this bug. *** Description of problem: Happens on first boot of a current Rawhide Workstation install. Version-Release number of selected component: selinux-policy-3.13.1-258.fc27.noarch Additional info: reporter: libreport-2.9.1 hashmarkername: setroubleshoot kernel: 4.12.0-0.rc5.git2.1.fc27.x86_64 type: libreport Similar to 1451377 and 1451379 (three different processes hitting the same denial). Proposing as an F27 Final blocker: "There must be no SELinux denial notifications or crash notifications on boot of or during installation from a release-blocking live image, or at first login after a default install of a release-blocking desktop." This bug appears to have been reported against 'rawhide' during the Fedora 27 development cycle. Changing version to '27'. Also happens in Fedora 26 with kernel 4.12. Discussed during blocker review [1]: AcceptedBlocker (Final) - clear violations of Final criterion "There must be no SELinux denial notifications or crash notifications on boot of or during installation from a release-blocking live image, or at first login after a default install of a release-blocking desktop." [1] https://meetbot-raw.fedoraproject.org/fedora-blocker-review/2017-08-21/ selinux-policy-3.13.1-283.4.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fd5e1aff6 selinux-policy-3.13.1-283.4.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report. See https://fedoraproject.org/wiki/QA:Updates_Testing for instructions on how to install test updates. You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-1fd5e1aff6 selinux-policy-3.13.1-283.4.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report. Fedora F25 has the same issue! |