Bug 2300338

Summary:	Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
Product:	[Fedora] Fedora	Reporter:	Aoife Moloney <amoloney>
Component:	Changes Tracking	Assignee:	Milos Malik <mmalik>
Status:	NEW ---	QA Contact:
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	rawhide	CC:	mmalik, zbyszek
Target Milestone:	---
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	2309208

Description Aoife Moloney 2024-07-29 12:07:38 UTC

This is a tracking bug for Change: Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
For more details, see: https://fedoraproject.org/wiki/Changes/SELinux_dontaudit_unlabeled_t

Reduce the amount of rules that prevent reporting of SELinux denials pertaining to unlabeled_t. This could influence the amount of SELinux-related logs on some systems, but will not cause any new permission denials.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2024-08-22 12:33:52 UTC

Hi Milos, could you provide a status update on this change please? Changes need to be code complete before we enter beta freeze next Tuesday 27th August. Are you still on track to land this in F41, or do you need to defer to F42? 

Thanks,
Aoife

Comment 2 Aoife Moloney 2025-01-24 14:19:37 UTC

Hi Michel, how goes this change for F42? The testable deadline is coming up in about two weeks, on Feb 4th, and changes need to be in good shape at this point https://docs.fedoraproject.org/en-US/program_management/changes_policy/#_change_process_milestones

Please let me know if you need to defer this to F43, otherwise if you're good to go for the change to be ready to meet the testable requirements, please update the status of the tracker bug to MODIFIED.


Thanks!
Aoife

Comment 3 Zbigniew Jędrzejewski-Szmek 2025-02-25 18:11:00 UTC

@vmojzis @mmalik, what's the status here?

Comment 4 Zbigniew Jędrzejewski-Szmek 2025-03-18 17:56:14 UTC

We discussed this during the FESCo meeting today:

Reduce the amount of "dontaudit" rules pertaining to unlabeled_t Change is marked as Incomplete. Owners can resubmit it for F43 or later if appropriate. APPROVED (+6, 0, 0)

Aoife, can you do the reassignment please?