With exim-4.96-6.fc37.x86_64 and selinux-policy-targeted-37.20-1.fc37.noarch, every Exim queue run, by default scheduled every hour, causes an SELinux denial: | […] | type=AVC msg=audit(1685423685.876:788): avc: denied { search } for pid=41331 comm="exim" name="net" dev="proc" ino=736304 scontext=system_u:system_r:exim_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 | type=AVC msg=audit(1685427285.924:805): avc: denied { search } for pid=42916 comm="exim" name="net" dev="proc" ino=736304 scontext=system_u:system_r:exim_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 | type=AVC msg=audit(1685430885.945:824): avc: denied { search } for pid=48419 comm="exim" name="net" dev="proc" ino=736304 scontext=system_u:system_r:exim_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 | type=AVC msg=audit(1685434485.981:854): avc: denied { search } for pid=50792 comm="exim" name="net" dev="proc" ino=736304 scontext=system_u:system_r:exim_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 | type=AVC msg=audit(1685438086.027:879): avc: denied { search } for pid=52557 comm="exim" name="net" dev="proc" ino=736304 scontext=system_u:system_r:exim_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=0 | […] This was also reported in the exim component as bug #2169286. There is a non-public Red Hat bug #1444441 with apparently the same topic. (NB: I don't know why Exim demands and if it should be allowed access.) Reproducible: Always
FEDORA-2023-e74ea79879 has been submitted as an update to Fedora 37. https://bodhi.fedoraproject.org/updates/FEDORA-2023-e74ea79879
FEDORA-2023-e74ea79879 has been pushed to the Fedora 37 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-e74ea79879` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-e74ea79879 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2023-e74ea79879 has been pushed to the Fedora 37 stable repository. If problem still persists, please make note of it in this bug report.