Fedora Account System
Red Hat Associate
Red Hat Customer
Description of problem: SELinux prevents saving locale and keyboard settings system-wide. It doesn't generate an AVC, but a USER_AVC. I suppose it makes a silent fail to most users. type=USER_AVC msg=audit(1362592255.514:1073): pid=644 uid=81 auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc: denied { send_msg } for msgtype=method_call interface=org.freedesktop.PolicyKit1.Authority member=CheckAuthorization dest=org.freedesktop.PolicyKit1 spid=31285 tpid=685 scontext=system_u:system_r:systemd_localed_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dbus exe="/usr/bin/dbus-daemon" sauid=81 hostname=? addr=? terminal=?' Version-Release number of selected component (if applicable): selinux-policy-3.11.1-83.fc18.noarch selinux-policy-devel-3.11.1-83.fc18.noarch selinux-policy-doc-3.11.1-83.fc18.noarch selinux-policy-targeted-3.11.1-83.fc18.noarch The selinux-policy package that shipped with F18 (selinux-policy-3.11.1-66.fc18.noarch.rpm) doesn't have this bug. It was introduced in some later update. If I downgrade to this version, the operation completes. How reproducible: Deterministic Additional info: Recent updates to selinux-policy seem to have broken locale and keyboard settings badly.
68b4b5619a881b5d5365183d4a6c1d914a43344f fixes this in Rawhide.
Backported.
selinux-policy-3.11.1-84.fc18 has been submitted as an update for Fedora 18. https://admin.fedoraproject.org/updates/selinux-policy-3.11.1-84.fc18
Package selinux-policy-3.11.1-84.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-84.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-3605/selinux-policy-3.11.1-84.fc18 then log in and leave karma (feedback).
Package selinux-policy-3.11.1-85.fc18: * should fix your issue, * was pushed to the Fedora 18 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing selinux-policy-3.11.1-85.fc18' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2013-3605/selinux-policy-3.11.1-85.fc18 then log in and leave karma (feedback).
selinux-policy-3.11.1-85.fc18 has been pushed to the Fedora 18 stable repository. If problems still persist, please make note of it in this bug report.