Bug 2300338 - Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
Summary: Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
Keywords:
Status: NEW
Alias: None
Product: Fedora
Classification: Fedora
Component: Changes Tracking
Version: rawhide
Hardware: Unspecified
OS: Unspecified
unspecified
unspecified
Target Milestone: ---
Assignee: Milos Malik
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: F43Changes
TreeView+ depends on / blocked
 
Reported: 2024-07-29 12:07 UTC by Aoife Moloney
Modified: 2025-03-19 10:22 UTC (History)
2 users (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Aoife Moloney 2024-07-29 12:07:38 UTC
This is a tracking bug for Change: Reduce the amount of "dontaudit" rules pertaining to unlabeled_t
For more details, see: https://fedoraproject.org/wiki/Changes/SELinux_dontaudit_unlabeled_t

Reduce the amount of rules that prevent reporting of SELinux denials pertaining to unlabeled_t. This could influence the amount of SELinux-related logs on some systems, but will not cause any new permission denials.

If you encounter a bug related to this Change, please do not comment here. Instead create a new bug and set it to block this bug.

Comment 1 Aoife Moloney 2024-08-22 12:33:52 UTC
Hi Milos, could you provide a status update on this change please? Changes need to be code complete before we enter beta freeze next Tuesday 27th August. Are you still on track to land this in F41, or do you need to defer to F42? 

Thanks,
Aoife

Comment 2 Aoife Moloney 2025-01-24 14:19:37 UTC
Hi Michel, how goes this change for F42? The testable deadline is coming up in about two weeks, on Feb 4th, and changes need to be in good shape at this point https://docs.fedoraproject.org/en-US/program_management/changes_policy/#_change_process_milestones

Please let me know if you need to defer this to F43, otherwise if you're good to go for the change to be ready to meet the testable requirements, please update the status of the tracker bug to MODIFIED.


Thanks!
Aoife

Comment 3 Zbigniew Jędrzejewski-Szmek 2025-02-25 18:11:00 UTC
@vmojzis @mmalik, what's the status here?

Comment 4 Zbigniew Jędrzejewski-Szmek 2025-03-18 17:56:14 UTC
We discussed this during the FESCo meeting today:

Reduce the amount of "dontaudit" rules pertaining to unlabeled_t Change is marked as Incomplete. Owners can resubmit it for F43 or later if appropriate. APPROVED (+6, 0, 0)

Aoife, can you do the reassignment please?


Note You need to log in before you can comment on or make changes to this bug.