Fedora Account System
Red Hat Associate
Red Hat Customer
For bootupd support in Fedora Atomic Desktops and Fedora IoT, we need the following fixes to be backported to F41 for the Beta: - https://github.com/fedora-selinux/selinux-policy/issues/2334 - https://github.com/fedora-selinux/selinux-policy/issues/2341 Fedora change page: https://fedoraproject.org/wiki/Changes/FedoraSilverblueBootupd Blocks: https://bugzilla.redhat.com/show_bug.cgi?id=2150982 Reproducible: Always Steps to Reproduce: 1. Install Fedora Silverblue 40 2. Update to Fedora Silverblue 41 3. Run `sudo bootupctl update` 4. Looks at audit logs Actual Results: SELinuc AVCs, update fails Expected Results: No SELinux AVCs Also tracked in https://github.com/coreos/bootupd/issues/694
Proposed as a Freeze Exception for 41-beta by Fedora user siosm using the blocker tracking app because: Needed for bootupd support in Fedora Atomic Desktops (F41 change)
- https://github.com/fedora-selinux/selinux-policy/issues/2334 is fixed by https://github.com/fedora-selinux/selinux-policy/pull/2336 - https://github.com/fedora-selinux/selinux-policy/issues/2341 is fixed by https://github.com/fedora-selinux/selinux-policy/pull/2344
+3 in https://pagure.io/fedora-qa/blocker-review/issue/1641 , marking accepted.
FEDORA-2024-bf5675ca7d (selinux-policy-41.16-2.fc41) has been submitted as an update to Fedora 41. https://bodhi.fedoraproject.org/updates/FEDORA-2024-bf5675ca7d
FEDORA-2024-bf5675ca7d has been pushed to the Fedora 41 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2024-bf5675ca7d` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2024-bf5675ca7d See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2024-bf5675ca7d (selinux-policy-41.16-2.fc41) has been pushed to the Fedora 41 stable repository. If problem still persists, please make note of it in this bug report.