Fedora Account System
Red Hat Associate
Red Hat Customer
Upon upgrade from Fedora 42 to Fedora 43, the radiusd process crashes upon startup when launched by systemd. The system has SELinux enabled in enforcing mode (and always had). By modifying the startup string I was able to understand that the process goes out of memory: "ExecStartPre=/usr/sbin/radiusd -C -lstdout -xxx" Sun Jan 4 16:42:17 2026 : Error: /etc/raddb/policy.d/filter[31]: Invalid regular expression: Sun Jan 4 16:42:17 2026 : Error: /etc/raddb/policy.d/filter[31]: Sun Jan 4 16:42:17 2026 : Error: /etc/raddb/policy.d/filter[31]: ^ Pattern JIT failed: no more memory If you launch radiusd -X from root or from it's radiusd user it works. If you temporarily put SELinux in permissive mode the service unit is able to start. I can't find any SELinux policy violation (grep AVC /var/log/messages) that I'm aware of. Reproducible: Always Steps to Reproduce: 1. Upgrade a Fedora 42 system to 43, with FreeRADIUS installed 2. Reboot Actual Results: FreeRADIUS fails to start Expected Results: FreeRADIUS starts
OK, there are a couple of solutions to this problem. It stems from the fact that FreeRADIUS 3.2.8, that is packages with Fedora 43 uses PCRE2, whereas previous versions used PCRE1 (source here: https://lists.freeradius.org/pipermail/freeradius-users/2025-August/105866.html) There are two solutions: 1- Ship the new 3.2.8-2 which use PCRE1 again. 2- Enable the SELinux boolean radius_use_jit in the package you are shipping now (that's what I did on my system which broke). It's all discussed here: https://lists.freeradius.org/pipermail/freeradius-users/2025-August/105855.html The fact that nothing shows up in the log is because there is a don't audit rule in the Fedora SELinux policy package for this but my ignorance on that matter had me spend more time than necessary troubleshooting. Anyway, F43 ships a package which is known to be broken and must be updated / modified. Ciao, Luca
FEDORA-2026-35df324d28 (freeradius-3.2.8-2.fc43) has been submitted as an update to Fedora 43. https://bodhi.fedoraproject.org/updates/FEDORA-2026-35df324d28
FEDORA-2026-35df324d28 has been pushed to the Fedora 43 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2026-35df324d28` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2026-35df324d28 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
It works, thank you for both upgrading the package and setting the boolean. It should take care of this in the long run when they'll start using PCRE2 again.
FEDORA-2026-35df324d28 (freeradius-3.2.8-2.fc43) has been pushed to the Fedora 43 stable repository. If problem still persists, please make note of it in this bug report.