July 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1201082] New: [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201082 Bug ID: 1201082 Summary: [Build 20220630] Unable to connect to the salt master publisher at /var/run/salt/master Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/2443415/modules/salt _master/steps/98 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Salt Assignee: salt-maintainers(a)suse.de Reporter: dimstar(a)opensuse.org QA Contact: qa-bugs(a)suse.de Found By: openQA Blocker: Yes ## Observation The test run does: > salt-call test.ping; echo mYFMh-$?- # wait_serial expected: qr/mYFMh-\d+-/u # Result: [0;36mlocal[0;0m: [0;1;33mTrue[0;0m mYFMh-0- > salt --state-output=terse -t 360 '*' test.ping; echo graLE-$?- [ERROR ] Unable to connect to the salt master publisher at /var/run/salt/master [0;32mThe salt master could not be contacted. Is master running?[0;0m graLE-0- openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-salt-master@64bit fails in [salt_master](https://openqa.opensuse.org/tests/2443415/modules/salt_master/… ## Test suite description Maintainer: zluo(a)suse.de MM tests for Tumbleweed ## Reproducible Fails since (at least) Build [20220630](https://openqa.opensuse.org/tests/2443415) (current job) ## Expected result Last good: [20220629](https://openqa.opensuse.org/tests/2442052) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 6

[Bug 1201348] [Build 20220708] Upgrading Tumbleweed fails due to SELinux package issues
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201348 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|[Build 20220708] |[Build 20220708] Upgrading |transactional update: exit |Tumbleweed fails due to |1 without real indication |SELinux package issues -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201348] [Build 20220708] transactional update: exit 1 without real indication
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201348 https://bugzilla.suse.com/show_bug.cgi?id=1201348#c5 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED Component|Other |Security Assignee|dimstar(a)opensuse.org |jsegitz(a)suse.com --- Comment #5 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Fabian Vogt from comment #4) > (In reply to Fabian Vogt from comment #3) > > (In reply to Dominique Leuenberger from comment #2) > > > @Fabien: you mentioned that you had a more recent image available that we > > > could use for the update tests? > > > > > > This image in use is ~ 2 years old - half an eternity for a rolling distro. > > > Having a more recent base might be close to reality > > > > Yep, 20220301, which is reasonable IMO. I swapped it out and triggered a run: > > https://openqa.opensuse.org/tests/2462901#step/tdup/11 > > > > Now it fails in two other ways instead :-/ > > Time to get into the rabbit hole! > > libpcre2-8-0 gets updated, which apparently invalidates the semodule cache > or something like that. That's the cause of the "regex version mismatch" > messages. However, the cache can't be rebuilt for two separate reasons: > 1. For some reason, if combustion ran on the first boot, some files in > /var/lib/selinux/... get missing (rpm -qV selinux-policy-targeted complains) That reason for that was a bug in the old transactional-update, which is fixed meanwhile. With t-u selfupdate enabled (the case if either combustion or ignition enable network), this doesn't appear anymore. This is the case in openQA, so we can ignore this. > 2. Avoiding combustion, the files are there, but semodule -B fails anyway: > Failed to resolve allow statement at > /var/lib/selinux/targeted/tmp/modules/200/container/cil:1257 > Failed to resolve AST > /usr/sbin/semodule: Failed! > > This can be reproduced easily by just updating libpcre2-8-0 only and then > running semodule -B. Updating policyutils (and libselinux etc.) doesn't help > either. The reason for that is that the policy is invalid until container-selinux is also updated. So we need some dependency to ensure that selinux-policy-targeted is updated (closely) together with container-selinux. Reassigning. That also (eventually) gets rid of the regex version mismatch issues, though the right fix for that is apparently to have libselinux or a similar package install a file trigger for libpcre updates to call semodule -B: https://bugzilla.redhat.com/show_bug.cgi?id=2013642#c7 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199996] New: SID Corruuption in Active Directory Domain Controllers
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1199996 Bug ID: 1199996 Summary: SID Corruuption in Active Directory Domain Controllers Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.3 Hardware: Other OS: Other Status: NEW Severity: Major Priority: P5 - None Component: Samba Assignee: samba-maintainers(a)SuSE.de Reporter: zombie.ryushu(a)zoho.com QA Contact: samba-maintainers(a)SuSE.de Found By: --- Blocker: --- [2022/05/28 08:52:15.774356, 0] ../../source4/auth/unix_token.c:97(security_token_to_unix_token) Unable to convert first SID (S-1-5-7) in user token to a UID. Conversion was returned as type 0, full token: [2022/05/28 08:52:15.774483, 0] ../../libcli/security/security_token.c:52(security_token_debug) Security token SIDs (4): SID[ 0]: S-1-5-7 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-64-10 Privileges (0x 0): Rights (0x 0): [2022/05/28 08:52:34.664436, 0] ../../source4/auth/unix_token.c:97(security_token_to_unix_token) Unable to convert first SID (S-1-5-21-2139989288-483860436-2398042574-2000) in user token to a UID. Conversion was returned as type 0, full token: [2022/05/28 08:52:34.664542, 0] ../../libcli/security/security_token.c:52(security_token_debug) Security token SIDs (13): SID[ 0]: S-1-5-21-2139989288-483860436-2398042574-2000 SID[ 1]: S-1-5-21-2139989288-483860436-2398042574-513 SID[ 2]: S-1-5-21-2139989288-483860436-2398042574-512 SID[ 3]: S-1-5-21-2139989288-483860436-2398042574-572 SID[ 4]: S-1-5-21-2139989288-483860436-2398042574-41238 SID[ 5]: S-1-5-21-2139989288-483860436-2398042574-41742 SID[ 6]: S-1-5-21-2139989288-483860436-2398042574-41237 SID[ 7]: S-1-1-0 SID[ 8]: S-1-5-2 SID[ 9]: S-1-5-11 SID[ 10]: S-1-5-32-545 SID[ 11]: S-1-5-32-544 SID[ 12]: S-1-5-32-554 Privileges (0x 1FFFFF00): Privilege[ 0]: SeTakeOwnershipPrivilege Privilege[ 1]: SeBackupPrivilege Privilege[ 2]: SeRestorePrivilege Privilege[ 3]: SeRemoteShutdownPrivilege Privilege[ 4]: SeSecurityPrivilege Privilege[ 5]: SeSystemtimePrivilege Privilege[ 6]: SeShutdownPrivilege Privilege[ 7]: SeDebugPrivilege Privilege[ 8]: SeSystemEnvironmentPrivilege Privilege[ 9]: SeSystemProfilePrivilege Privilege[ 10]: SeProfileSingleProcessPrivilege Privilege[ 11]: SeIncreaseBasePriorityPrivilege Privilege[ 12]: SeLoadDriverPrivilege Privilege[ 13]: SeCreatePagefilePrivilege Privilege[ 14]: SeIncreaseQuotaPrivilege Privilege[ 15]: SeChangeNotifyPrivilege Privilege[ 16]: SeUndockPrivilege Privilege[ 17]: SeManageVolumePrivilege Privilege[ 18]: SeImpersonatePrivilege Privilege[ 19]: SeCreateGlobalPrivilege Privilege[ 20]: SeEnableDelegationPrivilege Rights (0x 403): Right[ 0]: SeInteractiveLogonRight Right[ 1]: SeNetworkLogonRight Right[ 2]: SeRemoteInteractiveLogonRight [2022/05/28 08:52:34.671510, 0] ../../source4/auth/unix_token.c:97(security_token_to_unix_token) Unable to convert first SID (S-1-5-7) in user token to a UID. Conversion was returned as type 0, full token: [2022/05/28 08:52:34.671600, 0] ../../libcli/security/security_token.c:52(security_token_debug) Security token SIDs (4): SID[ 0]: S-1-5-7 SID[ 1]: S-1-1-0 SID[ 2]: S-1-5-2 SID[ 3]: S-1-5-64-10 Privileges (0x 0): Rights (0x 0): -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1201385] AUDIT-0: postfix: review of permissions-file-setuid-bit: /usr/sbin/postlog (02755)
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201385 http://bugzilla.opensuse.org/show_bug.cgi?id=1201385#c6 --- Comment #6 from OBSbugzilla Bot <bwiedemann+obsbugzillabot(a)suse.com> --- This is an autogenerated message for OBS integration: This bug (1201385) was mentioned in https://build.opensuse.org/request/show/989009 Factory / permissions -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201468] New: SHA256 checksum file does not match image
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

http://bugzilla.opensuse.org/show_bug.cgi?id=1201468 Bug ID: 1201468 Summary: SHA256 checksum file does not match image Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Documentation Assignee: fs(a)suse.com Reporter: Ulrich.Windl(a)rz.uni-regensburg.de QA Contact: adrian.schroeter(a)suse.com Found By: --- Blocker: --- I downloaded openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso, and selected to down load the checksum file as well; that latter was named openSUSE-Leap-15.4-DVD-x86_64-Media.iso.sha256, so an automatic verification via "sha256 -c" is not possible. However the checksums match: Standalone> sha256sum openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso 4683345f242397c7fd7d89a50731a120ffd60a24460e21d2634e783b3c169695 openSUSE-Leap-15.4-DVD-x86_64-Build243.2-Media.iso Standalone> cat openSUSE-Leap-15.4-DVD-x86_64-Media.iso.sha256 4683345f242397c7fd7d89a50731a120ffd60a24460e21d2634e783b3c169695 openSUSE-Leap-15.4-DVD-x86_64-Media.iso -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201460] LDAP not properly set up
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1201460 https://bugzilla.suse.com/show_bug.cgi?id=1201460#c1 Stefan Hundhammer <shundhammer(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Component|YaST2 |Samba Assignee|yast2-maintainers(a)suse.de |samba-maintainers(a)SuSE.de QA Contact|jsrain(a)suse.com |samba-maintainers(a)SuSE.de --- Comment #1 from Stefan Hundhammer <shundhammer(a)suse.com> --- Thank you for your bug report. LDAP and yast2-ldap* are maintained by the Samba team. Reassigning. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1003872] dracut creates faulty default cmdline argument
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1003872 https://bugzilla.suse.com/show_bug.cgi?id=1003872#c32 --- Comment #32 from Swamp Workflow Management <swamp(a)suse.de> --- SUSE-RU-2022:2380-1: An update that has four recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1003872,1175102,1178219,1199453 CVE References: JIRA References: Sources used: SUSE Linux Enterprise Server for SAP 15-SP1 (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise Server for SAP 15 (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise Server 15-SP1-LTSS (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise Server 15-SP1-BCL (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise Server 15-LTSS (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise High Performance Computing 15-SP1-LTSS (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise High Performance Computing 15-SP1-ESPOS (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise High Performance Computing 15-LTSS (src): dracut-044.2-150000.18.79.2 SUSE Linux Enterprise High Performance Computing 15-ESPOS (src): dracut-044.2-150000.18.79.2 SUSE Enterprise Storage 6 (src): dracut-044.2-150000.18.79.2 SUSE CaaS Platform 4.0 (src): dracut-044.2-150000.18.79.2 NOTE: This line indicates an update has been released for the listed product(s). At times this might be only a partial fix. If you have questions please reach out to maintenance coordination. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1197237] server:mail/postfix: Errors due to missing re-labeling on SELINUX enabled machines
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1197237 https://bugzilla.suse.com/show_bug.cgi?id=1197237#c6 --- Comment #6 from Johannes Segitz <jsegitz(a)suse.com> --- This likely has the same root cause as bsc#1197242 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198150] [Build 20220405] fails to install_LXQt pattern (lxqt-session not buildable at the moment)
by bugzilla_noreply＠suse.com 13 Jul '22

13 Jul '22

https://bugzilla.suse.com/show_bug.cgi?id=1198150 https://bugzilla.suse.com/show_bug.cgi?id=1198150#c2 Michael Vetter <mvetter(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|CONFIRMED |RESOLVED Depends on|1198266 | Resolution|--- |FIXED --- Comment #2 from Michael Vetter <mvetter(a)suse.com> --- AFAIK the procps update was reverted. Thus building works again. In the meanwhile this hit also other distributions and LXQt team will review the sent patch soon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0