Bug 1458518 - SELinux is preventing gsd-print-notif from 'setattr' accesses on the directory cache.
Summary: SELinux is preventing gsd-print-notif from 'setattr' accesses on the director...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 26
Hardware: x86_64
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Lukas Vrabec
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard: abrt_hash:b2a7058cea0318ff0470134ceb8...
: 1454871 (view as bug list)
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-06-03 19:30 UTC by Joachim Frieben
Modified: 2021-04-15 09:04 UTC (History)
131 users (show)

Fixed In Version: selinux-policy-3.13.1-260.3.fc26
Clone Of:
Environment:
Last Closed: 2017-07-28 17:20:52 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Joachim Frieben 2017-06-03 19:30:07 UTC
Description of problem:
SELinux is preventing gsd-print-notif from 'setattr' accesses on the directory cache.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that gsd-print-notif should be allowed setattr access on the cache directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'gsd-print-notif' --raw | audit2allow -M my-gsdprintnotif
# semodule -X 300 -i my-gsdprintnotif.pp

Additional Information:
Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context                system_u:object_r:lib_t:s0
Target Objects                cache [ dir ]
Source                        gsd-print-notif
Source Path                   gsd-print-notif
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           
Policy RPM                    selinux-policy-3.13.1-254.fc26.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 4.11.3-300.fc26.x86_64 #1 SMP Thu
                              May 25 18:43:57 UTC 2017 x86_64 x86_64
Alert Count                   63
First Seen                    2017-06-03 11:56:40 CEST
Last Seen                     2017-06-03 11:59:46 CEST
Local ID                      cf1e5a64-95d0-43de-92a2-aff754d9415c

Raw Audit Messages
type=AVC msg=audit(1496483986.374:339): avc:  denied  { setattr } for  pid=1224 comm="gsd-print-notif" name="cache" dev="dm-0" ino=402485 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=0


Hash: gsd-print-notif,xdm_t,lib_t,dir,setattr

Version-Release number of selected component:
selinux-policy-3.13.1-254.fc26.noarch

Additional info:
component:      selinux-policy
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.3-300.fc26.x86_64
type:           libreport

Comment 1 Lukas Vrabec 2017-06-07 10:26:34 UTC
*** Bug 1454871 has been marked as a duplicate of this bug. ***

Comment 2 Boricua 2017-06-07 13:48:09 UTC
Description of problem:
I just updated Fedora 26 Alpha when the alert ocurred.

Version-Release number of selected component:
selinux-policy-3.13.1-254.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.3-300.fc26.x86_64
type:           libreport

Comment 3 abyss.7 2017-06-10 09:55:24 UTC
Description of problem:
I did `dnf update`

Version-Release number of selected component:
selinux-policy-3.13.1-254.fc26.noarch
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.3-300.fc26.x86_64
type:           libreport

Comment 4 Boricua 2017-06-10 14:22:26 UTC
Description of problem:
I was updating Fedora 26 Alpha.

Version-Release number of selected component:
selinux-policy-3.13.1-254.fc26.noarch
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.3-302.fc26.x86_64
type:           libreport

Comment 5 Mirek Svoboda 2017-06-11 09:54:56 UTC
Description of problem:
dnf update

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.4-300.fc26.x86_64
type:           libreport

Comment 6 Ankur Sinha (FranciscoD) 2017-06-11 18:06:42 UTC
Description of problem:
Installed a new font using dnf:   levien-inconsolata-fonts

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.10.6-200.fc25.x86_64
type:           libreport

Comment 7 Dawid Zamirski 2017-06-12 14:36:30 UTC
Description of problem:
ran dnf update

Version-Release number of selected component:
selinux-policy-3.13.1-254.fc26.noarch
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.3-302.fc26.x86_64
type:           libreport

Comment 8 ToFabricio 2017-06-14 13:52:00 UTC
Description of problem:
Desde la programa “Software”, estaba instalando los complementos de Firefox como adobe flash y de ahí estaba navegando luego me salio la notificación de que se produjo un problema y volví a la ventana Software la cual me sale una ventana que no responde y aunque le de a esperar no responde

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.4-300.fc26.x86_64
type:           libreport

Comment 9 Ermanno Scaglione 2017-06-16 18:37:54 UTC
Description of problem:
installing some font using dnf


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.5-300.fc26.x86_64
type:           libreport

Comment 10 philippe.alff 2017-06-17 10:07:09 UTC
Description of problem:
during the installation of texlive

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.5-300.fc26.x86_64
type:           libreport

Comment 11 gesserat 2017-06-17 10:20:32 UTC
Description of problem:
1. Open terminal
2. dnf install powerline-fonts
3. y (yes on confirmation prompt)
4. Get selinux popup 

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.4-300.fc26.x86_64
type:           libreport

Comment 12 Langdon White 2017-06-22 01:51:36 UTC
Description of problem:
dnf update seemed to trigger it. However, i do have the tracer plugin installed which may be related.

Version-Release number of selected component:
selinux-policy-3.13.1-257.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.5-300.fc26.x86_64
type:           libreport

Comment 13 Fedora Update System 2017-06-23 18:12:24 UTC
selinux-policy-3.13.1-259.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b51a015cb

Comment 14 Fedora Update System 2017-06-25 01:20:04 UTC
selinux-policy-3.13.1-259.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-7b51a015cb

Comment 15 Fedora Update System 2017-06-26 19:13:16 UTC
selinux-policy-3.13.1-259.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 16 Pavel Roskin 2017-06-30 00:32:54 UTC
Description of problem:
Installing a large number of packages, including many texlive packages.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.7-300.fc26.x86_64
type:           libreport

Comment 17 Harvey 2017-07-06 05:20:52 UTC
Description of problem:
As root I enter this command: dnf -y install java java-devel

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 18 Shaun Assam 2017-07-07 01:47:23 UTC
Description of problem:
Was installing google-roboto fonts when this SELinux alert appeared.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 19 ToFabricio 2017-07-07 18:41:59 UTC
Description of problem:
Lo único que eh echo es instalar desde la terminal : “libreoffice-help-es.x86_64” y “libreoffice-langpack-es.x86_64” sin ningún tipo de problema.
Los únicos problemas hasta hora presentes es: que al iniciar gnome 26 beta por primera vez ya instalado la ventana de bienvenida que sale al iniciar se a serado y posteriormente al abrir “configuraciones” se a cerrado y me a lanzado una alerta la cual no pudo concluir el informe del fallo al reportarlo. Pero al reiniciar su funcionamiento hasta ahora a sido normal.
Otro problema que se a presentado es el botón de teclado touchpad que normalmente lo activa y desactiva desde el sin embargo este solo lo activa por favor se los ruego poder ver este ultimo problema es complicado escribir porque chocas sin querer la palma de la mano y lo e informada antes en anteriores instalación de gnome 26 alpa en la que funciono después de actualizar pero esto ya no ocurre. Gracias por su atención

Version-Release number of selected component:
selinux-policy-3.13.1-251.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.0-2.fc26.x86_64
type:           libreport

Comment 20 Mikhail 2017-07-09 10:49:03 UTC
Description of problem:
Occuring during last update


Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64+debug
type:           libreport

Comment 21 Jon Dufresne 2017-07-09 17:33:18 UTC
Description of problem:
Tried to install all fonts possible:

$ sudo dnf install \*-fonts

Version-Release number of selected component:
selinux-policy-3.13.1-251.fc26.noarch
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.0-2.fc26.x86_64
type:           libreport

Comment 22 arturpolak1 2017-07-09 19:09:35 UTC
Description of problem:
error occured probably after winetricks windows shared dll's installation

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 23 Joachim Frieben 2017-07-11 12:41:22 UTC
SELinux is preventing gsd-xsettings from setattr access on the directory /usr/lib/fontconfig/cache.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that gsd-xsettings should be allowed setattr access on the cache directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'gsd-xsettings' --raw | audit2allow -M my-gsdxsettings
# semodule -X 300 -i my-gsdxsettings.pp

Additional Information:
Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context                system_u:object_r:lib_t:s0
Target Objects                /usr/lib/fontconfig/cache [ dir ]
Source                        gsd-xsettings
Source Path                   gsd-xsettings
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           fontconfig-2.12.1-4.fc26.x86_64
Policy RPM                    selinux-policy-3.13.1-259.fc26.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux noname 4.11.8-300.fc26.x86_64 #1 SMP Thu
                              Jun 29 20:09:48 UTC 2017 x86_64 x86_64
Alert Count                   2
First Seen                    2017-07-11 11:00:07 CEST
Last Seen                     2017-07-11 11:00:08 CEST
Local ID                      7f4c1ffc-7799-462d-b87a-abbe395725b5

Raw Audit Messages
type=AVC msg=audit(1499763608.600:805): avc:  denied  { setattr } for  pid=1253 comm="gsd-xsettings" name="cache" dev="dm-0" ino=401512 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=0


Hash: gsd-xsettings,xdm_t,lib_t,dir,setattr

Comment 24 Matthias Eliasson 2017-07-11 21:22:39 UTC
Description of problem:
I installed powerline package from Fedora repos and got this error.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 25 Robert Hancock 2017-07-12 00:24:35 UTC
Description of problem:
Happened on login

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 26 Ronald Verbeek 2017-07-12 06:13:11 UTC
Description of problem:
running dnf --refresh upgrade on fresh upgraded f25>f26.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 27 bart.scheerlinck 2017-07-12 07:18:17 UTC
Description of problem:
running sudo dnf update after fresh install of Fedora 26 workstation image.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 28 Douglas 2017-07-12 15:15:17 UTC
Description of problem:
The alert is triggered after installing a font. I used GNOME Software. The alert is not present when installing fonts in Fedora MATE, only GNOME.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 29 Chuck Mead 2017-07-12 16:55:41 UTC
Description of problem:
dnf -y update presented it this morning

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 30 Mikhail 2017-07-13 02:28:55 UTC
Description of problem:
occured during last dnf update

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64+debug
type:           libreport

Comment 31 Francisco Javier Tsao Santín 2017-07-13 07:09:00 UTC
Description of problem:
It happened when I launched the Slack client.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 32 Ricardo 2017-07-14 01:35:23 UTC
Description of problem:
I was updating the system via terminal when an error alert appeared

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 33 cnmozzie 2017-07-14 11:17:17 UTC
Description of problem:
I encountered this problem when I installed TeXstudio from the app store.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 34 Petr 2017-07-14 14:37:01 UTC
Description of problem:
Ran "sudo dnf upgrade". The issue occured during the upgrade phase.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 35 Michael Wiktowy 2017-07-14 16:17:06 UTC
Description of problem:
SE alert popped up while installing updates on 14 July 2017. The full list of packages updated are as follows but I am not certain which one was responsible.

Upgraded:
autocorr-en.noarch 1:5.3.4.2-3.fc26                 
brlapi.x86_64 0.6.6-5.fc26
brltty.x86_64 5.5-5.fc26
evince.x86_64 3.24.0-3.fc26
evince-djvu.x86_64 3.24.0-3.fc26
evince-libs.x86_64 3.24.0-3.fc26
evince-nautilus.x86_64 3.24.0-3.fc26
expat.i686 2.2.1-1.fc26
expat.x86_64 2.2.1-1.fc26
folks.x86_64 1:0.11.4-1.fc26
git.x86_64 2.13.3-1.fc26
git-core.x86_64 2.13.3-1.fc26
git-core-doc.x86_64 2.13.3-1.fc26
libreoffice-calc.x86_64 1:5.3.4.2-3.fc26
libreoffice-core.x86_64 1:5.3.4.2-3.fc26
libreoffice-data.noarch 1:5.3.4.2-3.fc26
libreoffice-draw.x86_64 1:5.3.4.2-3.fc26
libreoffice-filters.x86_64 1:5.3.4.2-3.fc26
libreoffice-graphicfilter.x86_64 1:5.3.4.2-3.fc26
libreoffice-gtk2.x86_64 1:5.3.4.2-3.fc26
libreoffice-gtk3.x86_64 1:5.3.4.2-3.fc26
libreoffice-impress.x86_64 1:5.3.4.2-3.fc26
libreoffice-langpack-en.x86_64 1:5.3.4.2-3.fc26
libreoffice-math.x86_64 1:5.3.4.2-3.fc26
libreoffice-ogltrans.x86_64 1:5.3.4.2-3.fc26
libreoffice-opensymbol-fonts.noarch 1:5.3.4.2-3.fc26
libreoffice-pdfimport.x86_64 1:5.3.4.2-3.fc26
libreoffice-pyuno.x86_64 1:5.3.4.2-3.fc26
libreoffice-ure.x86_64 1:5.3.4.2-3.fc26
libreoffice-ure-common.noarch 1:5.3.4.2-3.fc26
libreoffice-writer.x86_64 1:5.3.4.2-3.fc26
libreoffice-x11.x86_64 1:5.3.4.2-3.fc26
libreoffice-xsltfilter.x86_64 1:5.3.4.2-3.fc26
libreofficekit.x86_64 1:5.3.4.2-3.fc26
lz4.x86_64 1.7.5-4.fc26
lz4-devel.x86_64 1.7.5-4.fc26
lz4-libs.i686 1.7.5-4.fc26
lz4-libs.x86_64 1.7.5-4.fc26
mutter.x86_64 3.24.3-2.fc26
openssh.x86_64 7.5p1-3.fc26
openssh-askpass.x86_64 7.5p1-3.fc26
openssh-clients.x86_64 7.5p1-3.fc26
openssh-server.x86_64 7.5p1-3.fc26
ostree.x86_64 2017.8-2.fc26
ostree-libs.x86_64 2017.8-2.fc26
pciutils.x86_64 3.5.5-1.fc26
pciutils-libs.x86_64 3.5.5-1.fc26
pcre.i686 8.41-1.fc26
pcre.x86_64 8.41-1.fc26
pcre-utf16.x86_64 8.41-1.fc26
perl-Git.noarch 2.13.3-1.fc26
python3-brlapi.x86_64 0.6.6-5.fc26
vim-minimal.x86_64 2:8.0.705-1.fc26

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 36 vaughn miller 2017-07-14 17:43:27 UTC
Description of problem:
doing dnf update

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 37 Robb Romans 2017-07-14 19:51:13 UTC
Hi. selinux-policy-3.13.1-259.fc26.noarch does not fix this issue.

Comment 38 Mikhail 2017-07-15 07:16:03 UTC
Description of problem:
occured during update

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.i686+PAE
type:           libreport

Comment 39 Dmitry Burstein 2017-07-15 10:49:05 UTC
Description of problem:
I was making 'dnf update'

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 40 Gabriel Einsdorf 2017-07-16 09:33:09 UTC
Description of problem:
It pooped up during dnf upgrade 

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 41 Chuck Mead 2017-07-16 19:39:56 UTC
Description of problem:
I was patching the system up.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 42 easecond 2017-07-16 20:03:10 UTC
Description of problem:
After a new clean install of Fedora 26. this popped up at the end of running my first dnf upgrade in the terminal.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 43 Peter Schiffer 2017-07-16 20:17:12 UTC
Description of problem:
AVC denial triggered during dnf upgrade.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 44 aairey 2017-07-17 05:55:55 UTC
Description of problem:
Got the error during a `dnf update`, not sure which package.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 45 Ciaran Doherty 2017-07-17 07:50:48 UTC
Description of problem:
Woke up a sleeping laptop and got this error

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 46 swyoung.tw 2017-07-17 13:28:46 UTC
Description of problem:
A fresh install of Fedora 26.
After first reboot-and-update by Gnome Software, on the first try installing program through Software, SELinux alert prompts up.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 47 utom 2017-07-18 16:09:11 UTC
Description of problem:
Just update F26

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 48 Boricua 2017-07-19 11:39:19 UTC
Description of problem:
I was implementing the better font redenring feature provided by fedy.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 49 John Freed 2017-07-19 19:03:08 UTC
Problem is still not fixed as of selinux-policy-3.13.1-260.1.fc26.noarch

Comment 50 Victor Costan 2017-07-20 11:11:54 UTC
Description of problem:
I was in the middle of a dnf upgrade operation, but I don't think it's related.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 51 "FeRD" (Frank Dana) 2017-07-20 21:35:35 UTC
Description of problem:
Occurred during `dnf uprade`

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 52 Ricardo 2017-07-22 15:23:25 UTC
Description of problem:
Estava atualizando o sistema assim que instalei e o app reportou essa mensagem.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 53 Anthony Green 2017-07-23 13:28:05 UTC
Description of problem:
I just ran 'dnf update'

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 54 Vassilis Kontodimas 2017-07-23 16:08:19 UTC
Description of problem:
I basically installed the google serif noto fonts and tried to run Houdini Apprentice. That was the moment this alert popped up. I believe Houdini has issues with font cache on Fedora 26.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 55 Kazuo Moriwaka 2017-07-24 02:31:32 UTC
Description of problem:
It is occured when I delete a font from gnome-software

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64+debug
type:           libreport

Comment 56 Fedora Update System 2017-07-24 09:01:50 UTC
selinux-policy-3.13.1-260.3.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f02d330ca

Comment 57 Peter Schiffer 2017-07-24 14:18:23 UTC
Description of problem:
Just updating the system with `dnf upgrade`.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 58 Pavel Roskin 2017-07-24 16:28:41 UTC
Description of problem:
Updating packages on Fedora with "dnf -y upgrade"


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 59 Fedora Update System 2017-07-25 04:25:40 UTC
selinux-policy-3.13.1-260.3.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2017-8f02d330ca

Comment 60 gesserat 2017-07-25 14:46:02 UTC
Description of problem:
Later part of dnf upgrade triggered AVC denial

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 61 Joshua Rich 2017-07-26 04:14:50 UTC
Description of problem:
Not sure what exactly triggered this one, but seems like something that should be handled by the policy?


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 62 Udyant Wig 2017-07-26 05:00:50 UTC
Description of problem:
Installed Google noto fonts: sans, serif, and sans UI.
$ sudo dnf install google-noto-{sans,serif,sans-ui}-fonts

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 63 aairey 2017-07-26 06:30:39 UTC
Description of problem:
During dnf update of gnome-settings-daemon

> Running scriptlet: gnome-settings-daemon-3.24.2-2.fc26.x86_64

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 64 zahour 2017-07-26 08:07:01 UTC
Description of problem:
Update Fedora 26 with dnf.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64+debug
type:           libreport

Comment 65 Matt 2017-07-26 18:47:18 UTC
Description of problem:
I was just running dnf update and this warning popped up

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 66 Rain 2017-07-26 23:04:15 UTC
Description of problem:
The alert come out after dnf update.

By running sudo dnf update in terminal.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 67 vaughn miller 2017-07-27 06:10:07 UTC
Description of problem:
just finished doing an update

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 68 Eugene Murray 2017-07-27 14:20:55 UTC
Description of problem:
sudo dnf update -y

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 69 Petr 2017-07-27 16:08:55 UTC
Description of problem:
Occured during dnf upgrade.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 70 Timur Kristóf 2017-07-27 17:58:57 UTC
Description of problem:
I just ran 'dnf update -y' as the root user.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 71 vikram goyal 2017-07-28 04:27:12 UTC
Description of problem:
I just received this message. I presume it is a system process so the default dir labelling & app permissions as per policy are at comflict.
Recently the whole system, after an upgrade from 25 -> 26 was relabelled. 

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 72 Zzyzx Wolfe 2017-07-28 14:54:18 UTC
Description of problem:
While running sudo dnf uninstall ibus, I got this error from SELinux.

Here are the specifics:
[Zzyzx@Brussels ~]$ sudo dnf remove ibus
Dependencies resolved.
================================================================================
 Package                  Arch    Version                  Repository      Size
================================================================================
Removing:
 ibus                     x86_64  1.5.16-4.fc26            @@commandline   14 M
 ibus-gtk2                x86_64  1.5.16-4.fc26            @@commandline   31 k
 ibus-gtk3                x86_64  1.5.16-4.fc26            @@commandline   31 k
 ibus-hangul              x86_64  1.5.0-8.fc26             @@commandline  210 k
 ibus-kkc                 x86_64  1.5.22-5.fc26            @@commandline  236 k
 ibus-libpinyin           x86_64  1.9.0-1.fc26             @@commandline  2.7 M
 ibus-libzhuyin           x86_64  1.7.10-2.fc26            @@commandline  407 k
 ibus-m17n                x86_64  1.3.4-22.fc26            @@commandline  123 k
 ibus-qt                  x86_64  1.3.3-13.fc26            @@commandline  492 k
 ibus-rawcode             x86_64  1.3.2-8.fc26             @@commandline   40 k
 ibus-setup               noarch  1.5.16-4.fc26            @@commandline  309 k
 ibus-typing-booster      noarch  1.5.32-2.fc26            @@commandline  8.9 M
 ibus-wayland             x86_64  1.5.16-4.fc26            @@commandline   23 k
Removing unused dependencies:
 cldr-emoji-annotation    noarch  31.0.0_1-1.fc26          @@commandline   17 M
 google-noto-emoji-fonts  noarch  20170608-1.fc26          @@commandline  4.9 M
 libhangul                x86_64  0.1.0-13.fc26            @@commandline  6.3 M
 libkkc                   x86_64  0.3.5-5.fc26             @@commandline  681 k
 libkkc-common            noarch  0.3.5-5.fc26             @@commandline  365 k
 libkkc-data              x86_64  1:0.2.7-7.fc26           @@commandline   30 M
 marisa                   x86_64  0.2.4-21.fc26            @@commandline  239 k
 opencc                   x86_64  1.0.3-3.fc26             @@commandline  5.0 M
 skkdic                   noarch  20170102-2.T1100.fc26    @@commandline   24 M
 unicode-ucd              noarch  9.0.0-3.fc26             @@commandline   28 M

Transaction Summary
================================================================================
Remove  23 Packages

Freed space: 144 M
Is this ok [y/N]: y
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Erasing          : ibus-typing-booster-1.5.32-2.fc26.noarch              1/23 
  Running scriptlet: ibus-typing-booster-1.5.32-2.fc26.noarch              1/23 
  Erasing          : cldr-emoji-annotation-31.0.0_1-1.fc26.noarch          2/23 
  Erasing          : unicode-ucd-9.0.0-3.fc26.noarch                       3/23 
  Erasing          : google-noto-emoji-fonts-20170608-1.fc26.noarch        4/23 
  Erasing          : ibus-libzhuyin-1.7.10-2.fc26.x86_64                   5/23 
  Erasing          : ibus-kkc-1.5.22-5.fc26.x86_64                         6/23 
  Running scriptlet: ibus-kkc-1.5.22-5.fc26.x86_64                         6/23 
  Erasing          : libkkc-0.3.5-5.fc26.x86_64                            7/23 
  Running scriptlet: libkkc-0.3.5-5.fc26.x86_64                            7/23 
  Erasing          : ibus-hangul-1.5.0-8.fc26.x86_64                       8/23 
  Running scriptlet: ibus-hangul-1.5.0-8.fc26.x86_64                       8/23 
  Erasing          : ibus-rawcode-1.3.2-8.fc26.x86_64                      9/23 
  Running scriptlet: ibus-rawcode-1.3.2-8.fc26.x86_64                      9/23 
  Erasing          : ibus-qt-1.3.3-13.fc26.x86_64                         10/23 
  Running scriptlet: ibus-qt-1.3.3-13.fc26.x86_64                         10/23 
  Erasing          : ibus-m17n-1.3.4-22.fc26.x86_64                       11/23 
  Erasing          : ibus-libpinyin-1.9.0-1.fc26.x86_64                   12/23 
  Running scriptlet: ibus-libpinyin-1.9.0-1.fc26.x86_64                   12/23 
  Erasing          : libkkc-common-0.3.5-5.fc26.noarch                    13/23 
  Erasing          : libkkc-data-1:0.2.7-7.fc26.x86_64                    14/23 
  Erasing          : skkdic-20170102-2.T1100.fc26.noarch                  15/23 
  Erasing          : ibus-gtk2-1.5.16-4.fc26.x86_64                       16/23 
  Running scriptlet: ibus-gtk2-1.5.16-4.fc26.x86_64                       16/23 
  Erasing          : ibus-gtk3-1.5.16-4.fc26.x86_64                       17/23 
  Running scriptlet: ibus-gtk3-1.5.16-4.fc26.x86_64                       17/23 
  Erasing          : ibus-setup-1.5.16-4.fc26.noarch                      18/23 
  Erasing          : ibus-wayland-1.5.16-4.fc26.x86_64                    19/23 
  Erasing          : ibus-1.5.16-4.fc26.x86_64                            20/23 
  Running scriptlet: ibus-1.5.16-4.fc26.x86_64                            20/23 
  Erasing          : libhangul-0.1.0-13.fc26.x86_64                       21/23 
  Running scriptlet: libhangul-0.1.0-13.fc26.x86_64                       21/23 
  Erasing          : marisa-0.2.4-21.fc26.x86_64                          22/23 
  Running scriptlet: marisa-0.2.4-21.fc26.x86_64                          22/23 
  Erasing          : opencc-1.0.3-3.fc26.x86_64                           23/23 
  Running scriptlet: opencc-1.0.3-3.fc26.x86_64                           23/23 
  Verifying        : ibus-kkc-1.5.22-5.fc26.x86_64                         1/23 
  Verifying        : ibus-libpinyin-1.9.0-1.fc26.x86_64                    2/23 
  Verifying        : skkdic-20170102-2.T1100.fc26.noarch                   3/23 
  Verifying        : ibus-libzhuyin-1.7.10-2.fc26.x86_64                   4/23 
  Verifying        : ibus-m17n-1.3.4-22.fc26.x86_64                        5/23 
  Verifying        : ibus-qt-1.3.3-13.fc26.x86_64                          6/23 
  Verifying        : ibus-rawcode-1.3.2-8.fc26.x86_64                      7/23 
  Verifying        : ibus-setup-1.5.16-4.fc26.noarch                       8/23 
  Verifying        : ibus-typing-booster-1.5.32-2.fc26.noarch              9/23 
  Verifying        : ibus-wayland-1.5.16-4.fc26.x86_64                    10/23 
  Verifying        : libkkc-0.3.5-5.fc26.x86_64                           11/23 
  Verifying        : libkkc-common-0.3.5-5.fc26.noarch                    12/23 
  Verifying        : libkkc-data-1:0.2.7-7.fc26.x86_64                    13/23 
  Verifying        : marisa-0.2.4-21.fc26.x86_64                          14/23 
  Verifying        : google-noto-emoji-fonts-20170608-1.fc26.noarch       15/23 
  Verifying        : unicode-ucd-9.0.0-3.fc26.noarch                      16/23 
  Verifying        : cldr-emoji-annotation-31.0.0_1-1.fc26.noarch         17/23 
  Verifying        : libhangul-0.1.0-13.fc26.x86_64                       18/23 
  Verifying        : opencc-1.0.3-3.fc26.x86_64                           19/23 
  Verifying        : ibus-1.5.16-4.fc26.x86_64                            20/23 
  Verifying        : ibus-gtk2-1.5.16-4.fc26.x86_64                       21/23 
  Verifying        : ibus-gtk3-1.5.16-4.fc26.x86_64                       22/23 
  Verifying        : ibus-hangul-1.5.0-8.fc26.x86_64                      23/23 

Removed:
  ibus.x86_64 1.5.16-4.fc26                                                     
  ibus-gtk2.x86_64 1.5.16-4.fc26                                                
  ibus-gtk3.x86_64 1.5.16-4.fc26                                                
  ibus-hangul.x86_64 1.5.0-8.fc26                                               
  ibus-kkc.x86_64 1.5.22-5.fc26                                                 
  ibus-libpinyin.x86_64 1.9.0-1.fc26                                            
  ibus-libzhuyin.x86_64 1.7.10-2.fc26                                           
  ibus-m17n.x86_64 1.3.4-22.fc26                                                
  ibus-qt.x86_64 1.3.3-13.fc26                                                  
  ibus-rawcode.x86_64 1.3.2-8.fc26                                              
  ibus-setup.noarch 1.5.16-4.fc26                                               
  ibus-typing-booster.noarch 1.5.32-2.fc26                                      
  ibus-wayland.x86_64 1.5.16-4.fc26                                             
  cldr-emoji-annotation.noarch 31.0.0_1-1.fc26                                  
  google-noto-emoji-fonts.noarch 20170608-1.fc26                                
  libhangul.x86_64 0.1.0-13.fc26                                                
  libkkc.x86_64 0.3.5-5.fc26                                                    
  libkkc-common.noarch 0.3.5-5.fc26                                             
  libkkc-data.x86_64 1:0.2.7-7.fc26                                             
  marisa.x86_64 0.2.4-21.fc26                                                   
  opencc.x86_64 1.0.3-3.fc26                                                    
  skkdic.noarch 20170102-2.T1100.fc26                                           
  unicode-ucd.noarch 9.0.0-3.fc26                                               

Complete!

Cheers,
Zzyzx

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 73 Zzyzx Wolfe 2017-07-28 14:58:55 UTC
Description of problem:
SELinux is preventing gsd-xsettings from 'setattr' accesses on the directory /usr/lib/fontconfig/cache.

*****  Plugin catchall (100. confidence) suggests   **************************

If you believe that gsd-xsettings should be allowed setattr access on the cache directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'gsd-xsettings' --raw | audit2allow -M my-gsdxsettings
# semodule -X 300 -i my-gsdxsettings.pp

Additional Information:
Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context                system_u:object_r:lib_t:s0
Target Objects                /usr/lib/fontconfig/cache [ dir ]
Source                        gsd-xsettings
Source Path                   gsd-xsettings
Port                          <Unknown>
Host                          (removed)
Source RPM Packages           
Target RPM Packages           fontconfig-2.12.1-4.fc26.x86_64
Policy RPM                    selinux-policy-3.13.1-260.1.fc26.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     (removed)
Platform                      Linux (removed) 4.11.11-300.fc26.x86_64 #1 SMP Mon
                              Jul 17 16:32:11 UTC 2017 x86_64 x86_64
Alert Count                   1
First Seen                    2017-07-28 07:45:31 MST
Last Seen                     2017-07-28 07:45:31 MST
Local ID                      57915e5d-0c09-485f-a7cc-8c22f59bd0b6

Raw Audit Messages
type=AVC msg=audit(1501253131.791:643): avc:  denied  { setattr } for  pid=1448 comm="gsd-xsettings" name="cache" dev="dm-0" ino=785462 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=0


Hash: gsd-xsettings,xdm_t,lib_t,dir,setattr

While running sudo dnf uninstall ibus, I got this error from SELinux.

Here are the specifics:
[Zzyzx@Brussels ~]$ sudo dnf remove ibus
Dependencies resolved.
================================================================================
 Package                  Arch    Version                  Repository      Size
================================================================================
Removing:
 ibus                     x86_64  1.5.16-4.fc26            @@commandline   14 M
 ibus-gtk2                x86_64  1.5.16-4.fc26            @@commandline   31 k
 ibus-gtk3                x86_64  1.5.16-4.fc26            @@commandline   31 k
 ibus-hangul              x86_64  1.5.0-8.fc26             @@commandline  210 k
 ibus-kkc                 x86_64  1.5.22-5.fc26            @@commandline  236 k
 ibus-libpinyin           x86_64  1.9.0-1.fc26             @@commandline  2.7 M
 ibus-libzhuyin           x86_64  1.7.10-2.fc26            @@commandline  407 k
 ibus-m17n                x86_64  1.3.4-22.fc26            @@commandline  123 k
 ibus-qt                  x86_64  1.3.3-13.fc26            @@commandline  492 k
 ibus-rawcode             x86_64  1.3.2-8.fc26             @@commandline   40 k
 ibus-setup               noarch  1.5.16-4.fc26            @@commandline  309 k
 ibus-typing-booster      noarch  1.5.32-2.fc26            @@commandline  8.9 M
 ibus-wayland             x86_64  1.5.16-4.fc26            @@commandline   23 k
Removing unused dependencies:
 cldr-emoji-annotation    noarch  31.0.0_1-1.fc26          @@commandline   17 M
 google-noto-emoji-fonts  noarch  20170608-1.fc26          @@commandline  4.9 M
 libhangul                x86_64  0.1.0-13.fc26            @@commandline  6.3 M
 libkkc                   x86_64  0.3.5-5.fc26             @@commandline  681 k
 libkkc-common            noarch  0.3.5-5.fc26             @@commandline  365 k
 libkkc-data              x86_64  1:0.2.7-7.fc26           @@commandline   30 M
 marisa                   x86_64  0.2.4-21.fc26            @@commandline  239 k
 opencc                   x86_64  1.0.3-3.fc26             @@commandline  5.0 M
 skkdic                   noarch  20170102-2.T1100.fc26    @@commandline   24 M
 unicode-ucd              noarch  9.0.0-3.fc26             @@commandline   28 M

Transaction Summary
================================================================================
Remove  23 Packages

Freed space: 144 M
Is this ok [y/N]: y
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                        1/1 
  Erasing          : ibus-typing-booster-1.5.32-2.fc26.noarch              1/23 
  Running scriptlet: ibus-typing-booster-1.5.32-2.fc26.noarch              1/23 
  Erasing          : cldr-emoji-annotation-31.0.0_1-1.fc26.noarch          2/23 
  Erasing          : unicode-ucd-9.0.0-3.fc26.noarch                       3/23 
  Erasing          : google-noto-emoji-fonts-20170608-1.fc26.noarch        4/23 
  Erasing          : ibus-libzhuyin-1.7.10-2.fc26.x86_64                   5/23 
  Erasing          : ibus-kkc-1.5.22-5.fc26.x86_64                         6/23 
  Running scriptlet: ibus-kkc-1.5.22-5.fc26.x86_64                         6/23 
  Erasing          : libkkc-0.3.5-5.fc26.x86_64                            7/23 
  Running scriptlet: libkkc-0.3.5-5.fc26.x86_64                            7/23 
  Erasing          : ibus-hangul-1.5.0-8.fc26.x86_64                       8/23 
  Running scriptlet: ibus-hangul-1.5.0-8.fc26.x86_64                       8/23 
  Erasing          : ibus-rawcode-1.3.2-8.fc26.x86_64                      9/23 
  Running scriptlet: ibus-rawcode-1.3.2-8.fc26.x86_64                      9/23 
  Erasing          : ibus-qt-1.3.3-13.fc26.x86_64                         10/23 
  Running scriptlet: ibus-qt-1.3.3-13.fc26.x86_64                         10/23 
  Erasing          : ibus-m17n-1.3.4-22.fc26.x86_64                       11/23 
  Erasing          : ibus-libpinyin-1.9.0-1.fc26.x86_64                   12/23 
  Running scriptlet: ibus-libpinyin-1.9.0-1.fc26.x86_64                   12/23 
  Erasing          : libkkc-common-0.3.5-5.fc26.noarch                    13/23 
  Erasing          : libkkc-data-1:0.2.7-7.fc26.x86_64                    14/23 
  Erasing          : skkdic-20170102-2.T1100.fc26.noarch                  15/23 
  Erasing          : ibus-gtk2-1.5.16-4.fc26.x86_64                       16/23 
  Running scriptlet: ibus-gtk2-1.5.16-4.fc26.x86_64                       16/23 
  Erasing          : ibus-gtk3-1.5.16-4.fc26.x86_64                       17/23 
  Running scriptlet: ibus-gtk3-1.5.16-4.fc26.x86_64                       17/23 
  Erasing          : ibus-setup-1.5.16-4.fc26.noarch                      18/23 
  Erasing          : ibus-wayland-1.5.16-4.fc26.x86_64                    19/23 
  Erasing          : ibus-1.5.16-4.fc26.x86_64                            20/23 
  Running scriptlet: ibus-1.5.16-4.fc26.x86_64                            20/23 
  Erasing          : libhangul-0.1.0-13.fc26.x86_64                       21/23 
  Running scriptlet: libhangul-0.1.0-13.fc26.x86_64                       21/23 
  Erasing          : marisa-0.2.4-21.fc26.x86_64                          22/23 
  Running scriptlet: marisa-0.2.4-21.fc26.x86_64                          22/23 
  Erasing          : opencc-1.0.3-3.fc26.x86_64                           23/23 
  Running scriptlet: opencc-1.0.3-3.fc26.x86_64                           23/23 
  Verifying        : ibus-kkc-1.5.22-5.fc26.x86_64                         1/23 
  Verifying        : ibus-libpinyin-1.9.0-1.fc26.x86_64                    2/23 
  Verifying        : skkdic-20170102-2.T1100.fc26.noarch                   3/23 
  Verifying        : ibus-libzhuyin-1.7.10-2.fc26.x86_64                   4/23 
  Verifying        : ibus-m17n-1.3.4-22.fc26.x86_64                        5/23 
  Verifying        : ibus-qt-1.3.3-13.fc26.x86_64                          6/23 
  Verifying        : ibus-rawcode-1.3.2-8.fc26.x86_64                      7/23 
  Verifying        : ibus-setup-1.5.16-4.fc26.noarch                       8/23 
  Verifying        : ibus-typing-booster-1.5.32-2.fc26.noarch              9/23 
  Verifying        : ibus-wayland-1.5.16-4.fc26.x86_64                    10/23 
  Verifying        : libkkc-0.3.5-5.fc26.x86_64                           11/23 
  Verifying        : libkkc-common-0.3.5-5.fc26.noarch                    12/23 
  Verifying        : libkkc-data-1:0.2.7-7.fc26.x86_64                    13/23 
  Verifying        : marisa-0.2.4-21.fc26.x86_64                          14/23 
  Verifying        : google-noto-emoji-fonts-20170608-1.fc26.noarch       15/23 
  Verifying        : unicode-ucd-9.0.0-3.fc26.noarch                      16/23 
  Verifying        : cldr-emoji-annotation-31.0.0_1-1.fc26.noarch         17/23 
  Verifying        : libhangul-0.1.0-13.fc26.x86_64                       18/23 
  Verifying        : opencc-1.0.3-3.fc26.x86_64                           19/23 
  Verifying        : ibus-1.5.16-4.fc26.x86_64                            20/23 
  Verifying        : ibus-gtk2-1.5.16-4.fc26.x86_64                       21/23 
  Verifying        : ibus-gtk3-1.5.16-4.fc26.x86_64                       22/23 
  Verifying        : ibus-hangul-1.5.0-8.fc26.x86_64                      23/23 

Removed:
  ibus.x86_64 1.5.16-4.fc26                                                     
  ibus-gtk2.x86_64 1.5.16-4.fc26                                                
  ibus-gtk3.x86_64 1.5.16-4.fc26                                                
  ibus-hangul.x86_64 1.5.0-8.fc26                                               
  ibus-kkc.x86_64 1.5.22-5.fc26                                                 
  ibus-libpinyin.x86_64 1.9.0-1.fc26                                            
  ibus-libzhuyin.x86_64 1.7.10-2.fc26                                           
  ibus-m17n.x86_64 1.3.4-22.fc26                                                
  ibus-qt.x86_64 1.3.3-13.fc26                                                  
  ibus-rawcode.x86_64 1.3.2-8.fc26                                              
  ibus-setup.noarch 1.5.16-4.fc26                                               
  ibus-typing-booster.noarch 1.5.32-2.fc26                                      
  ibus-wayland.x86_64 1.5.16-4.fc26                                             
  cldr-emoji-annotation.noarch 31.0.0_1-1.fc26                                  
  google-noto-emoji-fonts.noarch 20170608-1.fc26                                
  libhangul.x86_64 0.1.0-13.fc26                                                
  libkkc.x86_64 0.3.5-5.fc26                                                    
  libkkc-common.noarch 0.3.5-5.fc26                                             
  libkkc-data.x86_64 1:0.2.7-7.fc26                                             
  marisa.x86_64 0.2.4-21.fc26                                                   
  opencc.x86_64 1.0.3-3.fc26                                                    
  skkdic.noarch 20170102-2.T1100.fc26                                           
  unicode-ucd.noarch 9.0.0-3.fc26                                               

Complete!

Cheers,
Zzyzx

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 74 Zzyzx Wolfe 2017-07-28 15:01:50 UTC
Sorry for sending two comments, but the first comment from the internal bug reported marked my bug as a duplicate of this bug, but it didn't include the original "SELinux is preventing gsd-xsettings from 'setattr' accesses on the directory /usr/lib/fontconfig/cache." description even though this bug is for "SELinux is preventing gsd-print-notif from 'setattr' accesses on the directory cache." so I tried to resubmit it.

At least the second comment shows all the proper details. If I should open this issue as a separate bug, please let me know. The Fedora bug reporter decided it was a duplicate of this bug, but I'm not so sure.

Cheers,
Zzyzx

Comment 75 Fedora Update System 2017-07-28 17:20:52 UTC
selinux-policy-3.13.1-260.3.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.

Comment 76 m 2017-07-28 17:44:46 UTC
Description of problem:
It happened in normal day to day use. I've only been using the web browser (google-chrome) and doing normal Fedora 26 updates.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.11-300.fc26.x86_64
type:           libreport

Comment 77 Miguel Perez 2017-07-28 23:12:01 UTC
Description of problem:
I was updating for the first time my Fedora 26

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 78 Brandon 2017-07-31 14:51:56 UTC
Description of problem:
It happened after I installed VirtualBox Guest Additions software. VirtualBox Version 5.1.26 r117224 (Qt5.6.2)


4GBs of RAM
2 CPUs
128MB video memory/Enabled 3D Acceleration

Everything thing else is set to VB's defaults.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 79 swyoung.tw 2017-08-01 13:10:47 UTC
Description of problem:
running dnf upgrade when SELinux Alert popped out.

Version-Release number of selected component:
selinux-policy-3.13.1-260.1.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 80 Christophe GERARDIN 2017-08-03 17:17:25 UTC
Description of problem:
dnf update after fresh install of Fedora 26 and addding RMPFusion free+non-free

DNF output :
...
  Mise à jour de        : java-1.8.0-openjdk-headless-1:1.8.0.141-1.b   175/775 
BDB2053 Freeing read locks for locker 0x924: 1230/140664110246144
BDB2053 Freeing read locks for locker 0x926: 1230/140664110246144
  Exécution du scriptlet: java-1.8.0-openjdk-headless-1:1.8.0.141-1.b   175/775 
attention : /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.141-1.b16.fc26.x86_64/jre/lib/security/java.security créé en tant que /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.141-1.b16.fc26.x86_64/jre/lib/security/java.security.rpmnew
erreur : db5 erreur(-30969) de dbenv->open: BDB0091 DB_VERSION_MISMATCH: Database environment version mismatch
erreur : impossible d'ouvrir l'index Packages en utilisant db5 -  (-30969)
erreur : impossible d'ouvrir la base de données paquet dans /var/lib/rpm
erreur : db5 erreur(-30969) de dbenv->open: BDB0091 DB_VERSION_MISMATCH: Database environment version mismatch
erreur : impossible d'ouvrir l'index Packages en utilisant db5 -  (-30969)
erreur : impossible d'ouvrir la base de données paquet dans /var/lib/rpm
erreur : db5 erreur(-30969) de dbenv->open: BDB0091 DB_VERSION_MISMATCH: Database environment version mismatch
erreur : impossible d'ouvrir l'index Packages en utilisant db5 -  (-30969)
erreur : impossible d'ouvrir la base de données paquet dans /var/lib/rpm
erreur : db5 erreur(-30969) de dbenv->open: BDB0091 DB_VERSION_MISMATCH: Database environment version mismatch
erreur : impossible d'ouvrir l'index Packages en utilisant db5 -  (-30969)
erreur : impossible d'ouvrir la base de données paquet dans /var/lib/rpm
restored /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.141-1.b16.fc26.x86_64/jre/lib/security/java.security.rpmnew to /usr/lib/jvm/java-1.8.0-openjdk-1.8.0.141-1.b16.fc26.x86_64/jre/lib/security/java.security
...

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 81 pang 2017-08-06 17:35:20 UTC
Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 82 Elias da Silva 2017-08-07 12:39:00 UTC
Description of problem:
/etc/sysconfig/iptables-config:
  IPTABLES_SAVE_ON_STOP="yes"
  systemctl stop iptables

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.1.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.10-300.fc26.x86_64
type:           libreport

Comment 83 Olivier Crête 2017-08-07 18:37:48 UTC
Description of problem:
This happened on a branch new F26 install!

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 84 Ricardo 2017-08-09 00:20:16 UTC
Description of problem:
estava atualizando o sistema operacional e apareceu essa mensagem.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 85 Aiki Zen 2017-08-12 14:05:30 UTC
Description of problem:
this error appar when i sudo yum update && sudo yum upgrade

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.3.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 86 Sergey Revin 2017-08-19 18:32:22 UTC
Description of problem:
Install Fedora Workstation 26 from live usb
Run Terminal
$ su
# dnf upgrade

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.4.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 87 John Richardson 2017-09-03 21:29:40 UTC
Description of problem:
Was just performing a full dnf upgrade post new installation of Fedora 26 x86_64 and the error was raised.

uname -a

Linux localhost.localdomain 4.11.8-300.fc26.x86_64 #1 SMP Thu Jun 29 20:09:48 UTC 2017 x86_64 x86_64 x86_64 GNU/Linux

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.6.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 88 Kamil Páral 2017-09-12 10:20:16 UTC
Description of problem:
Happened during "dnf install python2-spyder" command.

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 89 Petr 2017-09-12 16:23:40 UTC
Description of problem:
While running 'sudo dnf upgrade'.


Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.9-300.fc26.x86_64
type:           libreport

Comment 90 al0s 2017-10-04 19:19:53 UTC
Description of problem:
0) After fresh install computer had slept for long time period like more than 16 hours
1) System applications is updated with "yum update" command
2) The computer had slept automaticly after time period because of the inactivity

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 91 Ricardo Delphino 2017-10-05 02:47:14 UTC
Description of problem:
o problema aconteceu depois de executar no terminal a instalação do delta rpm, nano e dar um sudo dnf update

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 92 n002213f 2017-10-06 04:14:44 UTC
Description of problem:
1. Download network install for Fedora 26
2. After installation, ran dnf update -y
3. Received notification that the action had been blocked.
4. I think it shouldn't as it is part of the configuration process of the package

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 93 Shashikanth317 2017-10-13 13:54:40 UTC
Description of problem:
As far as I know..this issue occured when I run the following command: "sudo dnf update"

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 94 jim 2017-10-13 19:02:54 UTC
Description of problem:
first update after fresh install f26 x64, second occurance same laptop old hd. 

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 95 Nikolai Kolyago 2017-10-14 21:35:04 UTC
Description of problem:
Appeared during updating from fresh install to actual state

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.10.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 96 clayt85 2017-11-02 15:30:33 UTC
Description of problem:
Fresh install of Fedora 26 (ISO downloaded 11/2/2017). Opened terminal, ran 'sudo dnf update'.  This error occured during the update

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.13.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport

Comment 97 João Vitor 2017-11-14 23:20:10 UTC
Description of problem:
Assim que instalei o sistema no computador, realizei a atualização do sistema e exibiu essa mensagem, não sei o que ocasionou o problema 

Version-Release number of selected component:
selinux-policy-3.13.1-259.fc26.noarch
selinux-policy-3.13.1-260.13.fc26.noarch

Additional info:
reporter:       libreport-2.9.1
hashmarkername: setroubleshoot
kernel:         4.11.8-300.fc26.x86_64
type:           libreport


Note You need to log in before you can comment on or make changes to this bug.