On 5/17/22 17:19, Adam Williamson wrote:
On Tue, 2022-05-17 at 09:33 -0500, Richard Shaw wrote:I don't remember seeing any change proposals around SELinux for the Fedora 36 release but there seems to be several issues reported one way or another...https://ask.fedoraproject.org/t/high-number-of-selinux-issues-after-upgrading-to-fedora-36/22381/24 https://lists.fedoraproject.org/archives/list/us...@lists.fedoraproject.org/message/UYLMXFQPAQBZFAXA6GT6E7UOLHIW5V3X/ https://bugzilla.redhat.com/show_bug.cgi?id=2083923 These seem to all be after upgrading and not fresh install issues. Anyone know what's going on? I'm afraid this is harming end user experiences after largely positive reviews of Fedora I've seen on Youtube and Reddit.
...
The third one isn't one I knew about previously, but not an unusual kind of situation with upgrades, honestly. When I ran my own servers I'd run into something like this on just about every upgrade. The bug is properly filed. It's assigned to fail2ban because fail2ban ships its own selinux policy (fail2ban-selinux); that needs to be updated to allow whatever it's being denied here, most likely. That will be up to the fail2ban maintainer (Richard Shaw, it seems).
I've made a comment in the bug that I believe points out the cause (and thus needed fix).
-- Orion Poplawski he/him/his - surely the least important thing about me IT Systems Manager 720-772-5637 NWRA, Boulder/CoRA Office FAX: 303-415-9702 3380 Mitchell Lane or...@nwra.com Boulder, CO 80301 https://www.nwra.com/
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
