On ke, 15 joulu 2021, Alexander Bokovoy via FreeIPA-users wrote:
On ke, 15 joulu 2021, Sam Morris via FreeIPA-users wrote:
On ma, 13 joulu 2021, Alexander Bokovoy via FreeIPA-users wrote:
RHSA-2021:5142 adds RHEL IdM fix that should work together with Samba
changes introduced in RHSA-2021:5082.
https://access.redhat.com/errata/RHSA-2021:5142
Both samba and RHEL IdM packages in RHEL 8.5 can now be upgraded.
I'm unable to install the new update:
# dnf install ipa-selinux
Updating Subscription Management repositories.
Last metadata expiration check: 2:11:29 ago on Wed 15 Dec 2021 15:49:46 UTC.
Package ipa-selinux-4.9.6-6.module+el8.5.0+12660+88e16a2c.noarch is already
installed.
Error:
Problem: cannot install the best candidate for the job
- nothing provides selinux-policy >= 3.14.3-80.el8_5.1 needed by
ipa-selinux-4.9.6-10.module+el8.5.0+13587+92118e57.noarch
- nothing provides selinux-policy-base >= 3.14.3-80.el8_5.1 needed by
ipa-selinux-4.9.6-10.module+el8.5.0+13587+92118e57.noarch
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use
not only best candidate packages)
The latest available selinux-policy & selinux-policy-base is 3.14.3-80.el8. I
guess I just need to wait for updated packages to appear?
Thanks, I'll discuss this with SELinux policy team tomorrow.
As a workaround, you can skip upgrading ipa-selinux package if that is
possible (it seemed to work in my tests). 'dnf upgrade' should make it
possible to skip that.
Meanwhile, we are looking at doing selinux-policy updates soon.
--
/ Alexander Bokovoy
Sr. Principal Software Engineer
Security / Identity Management Engineering
Red Hat Limited, Finland
_______________________________________________
FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-le...@lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
