systemd version 251.4 returns an empty string for the chassis type. There is an upstream issue for this [1], which has been fixed [2]. However, that fix is not available in F37. This is an issue because the device security settings panel in gnome-control-center is hidden if there isn't a valid chassis type. We need the upstream fix in F37 to have functioning device security settings. A PR has been created [3] for the backport, to get things rolling. [1] https://github.com/systemd/systemd/issues/24384 [2] https://github.com/systemd/systemd/pull/24385/commits/471fdebfdea843648acb5abeacf5ae559c3ad77a [3] https://src.fedoraproject.org/rpms/systemd/pull-request/92
Allan, can you please share a screenshot of the security settings panel? I tried to find it, but I don't see it even on F36 Workstation Live with systemd-250.3, so I have no idea what it contains and whether it's important enough to be considered a blocker. Thanks.
The device security settings are new for GNOME 43 and Fedora 37. Due to this issue, and the fact that the settings don't show in a VM, I'm not able to grab a screenshot... :/ The panel is part of a program of work around hardware security, and more work is planned for F38. Having the panel in F37 is somewhat important for that, in order to get feedback from users.
Can you please describe what is included on that panel? Do you believe we should block Fedora release if it's not present, or is it enough to fix it post-release (which will then allow user feedback, a bit later)?
> Can you please describe what is included on that panel? Ha, sure. It shows 3 things: 1. The hardware security level, along with the details of the various security tests in fwupd 2. Secure Boot status 3. A list of security alerts, if any are present > Do you believe we should block Fedora release if it's not present, or is it enough to fix it post-release (which will then allow user feedback, a bit later)? If we had to, I might settle for fixing it post-release. However, there would be some downsides to that. In particular, we wouldn't be able to talk about the new settings npanel in our release marketing.
In upstream, already fixed by https://github.com/systemd/systemd/commit/471fdebfdea843648acb5abeacf5ae559c3ad77a, but not backported yet to stable repository.
-5/+6 in https://pagure.io/fedora-qa/blocker-review/issue/919 , marking rejected blocker, accepted FE.
FEDORA-2022-a3bf337a61 has been submitted as an update to Fedora 38. https://bodhi.fedoraproject.org/updates/FEDORA-2022-a3bf337a61
FEDORA-2022-a3bf337a61 has been pushed to the Fedora 38 stable repository. If problem still persists, please make note of it in this bug report.
Re-opening as this is filed against 37. Zbigniew, can we please get this backported for F37?
FEDORA-2022-7cf1869073 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2022-7cf1869073
*** Bug 2127183 has been marked as a duplicate of this bug. ***
Yeah, that's what I'm doing. Bodhi closes bugs automatically when the update for F38 is created. I wish there was a way to instruct bodhi not to do that in some cases.
FEDORA-2022-7cf1869073 has been pushed to the Fedora 37 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2022-7cf1869073` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2022-7cf1869073 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2022-7cf1869073 has been pushed to the Fedora 37 stable repository. If problem still persists, please make note of it in this bug report.