Bug 2238474 - Configure SSSD to access USB devices when enrolling IPA client
Summary: Configure SSSD to access USB devices when enrolling IPA client
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Fedora
Classification: Fedora
Component: freeipa
Version: 39
Hardware: Unspecified
OS: Linux
unspecified
medium
Target Milestone: ---
Assignee: IPA Maintainers
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks: 2233246
TreeView+ depends on / blocked
 
Reported: 2023-09-12 05:43 UTC by Alexander Bokovoy
Modified: 2023-09-22 00:18 UTC (History)
8 users (show)

Fixed In Version: freeipa-4.11.0-3.beta1.fc40 freeipa-4.11.0-4.beta1.fc40 freeipa-4.11.0-4.beta1.fc39
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2023-09-12 18:34:35 UTC
Type: ---
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker FREEIPA-10362 0 None None None 2023-09-12 05:43:28 UTC

Description Alexander Bokovoy 2023-09-12 05:43:16 UTC 
For passkeys (FIDO2) support, SSSD uses libfido2 library which needs access to USB devices. Add SELinux booleans handling to ipa-client-install so that correct SELinux booleans can be enabled and disabled during install and uninstall. Ignore and record a warning when SELinux policy does not support the boolean.

Upstream ticket: https://pagure.io/freeipa/issue/9434

Reproducible: Always
Comment 1 Fedora Update System 2023-09-12 06:08:03 UTC 
FEDORA-2023-e2bc666d55 has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2023-e2bc666d55
Comment 2 Fedora Update System 2023-09-12 06:19:50 UTC 
FEDORA-2023-f588e56837 has been submitted as an update to Fedora 39. https://bodhi.fedoraproject.org/updates/FEDORA-2023-f588e56837
Comment 3 Fedora Update System 2023-09-12 17:18:42 UTC 
FEDORA-2023-f6071a08b6 has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2023-f6071a08b6
Comment 4 Fedora Update System 2023-09-12 18:34:35 UTC 
FEDORA-2023-f6071a08b6 has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 5 Fedora Update System 2023-09-12 21:38:24 UTC 
FEDORA-2023-f588e56837 has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-f588e56837`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f588e56837

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 6 Fedora Update System 2023-09-18 12:42:40 UTC 
FEDORA-2023-cb42e9d02c has been submitted as an update to Fedora 40. https://bodhi.fedoraproject.org/updates/FEDORA-2023-cb42e9d02c
Comment 7 Fedora Update System 2023-09-18 13:56:07 UTC 
FEDORA-2023-cb42e9d02c has been pushed to the Fedora 40 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 8 Fedora Update System 2023-09-19 01:10:39 UTC 
FEDORA-2023-f588e56837 has been pushed to the Fedora 39 testing repository.
Soon you'll be able to install the update with the following command:
`sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2023-f588e56837`
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2023-f588e56837

See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
Comment 9 Fedora Update System 2023-09-22 00:18:20 UTC 
FEDORA-2023-f588e56837 has been pushed to the Fedora 39 stable repository.
If problem still persists, please make note of it in this bug report.
Note You need to log in before you can comment on or make changes to this bug.