On Wed, Mar 25, 2020 at 4:49 PM Nathanael D. Noblet <nathan...@gnat.ca>
wrote:

> Hello,
>
>   I upgraded to F32 yesterday and everything seems to have gone
> smoothly except I'm getting many selinux denials (I'm in permissive so
> functionality is ok at the moment). What should I report them against?
> I've done a relabel to try to resolve them.
>
Hi,

They should be reported for the selinux-policy component. No need this time
though, answers inline.


> A sample of the most common:
>
> SELinux is preventing /usr/lib/systemd/systemd-journald from read
> access on the lnk_file /run/user/1000/systemd/units/invocation:dbus-:
> 1.2-org.fedoraproject.Setroubleshootd@1.service.
>
This one will be fixed with the next selinux-package update, probably
tomorrow.


> SELinux is preventing pcscd from using the sys_nice capability.
>
> SELinux is preventing accounts-daemon from using the sys_nice
> capability.
>
Denials like this are under investigation, most likely they are harmless
and can be safely ignored.

Cheers,

>
> Sincerely,
> --
> Nathanael
> _______________________________________________
> devel mailing list -- devel@lists.fedoraproject.org
> To unsubscribe send an email to devel-le...@lists.fedoraproject.org
> Fedora Code of Conduct:
> https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org
>


-- 

Zdenek Pytela
Security controls team,
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org

Reply via email to