September 2022 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1199520] [SELinux] "no shell: permission denied" error on fresh Tumbleweed transactional server installation with enforcing SELinux
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1199520 https://bugzilla.suse.com/show_bug.cgi?id=1199520#c20 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(felix.niederwange | |r(a)suse.com) --- Comment #20 from Fabian Vogt <fvogt(a)suse.com> --- (In reply to Felix Niederwanger from comment #19) > Nope, not installed during this installation: > > > bsc1199520:~ # zypper se microos-tools > > S | Name | Summary | Type > > --+---------------+----------------------------------------+-------- > > | microos-tools | Files and Scripts for openSUSE MicroOS | package Does it work after transactional-update shell (in there: zypper in microos-tools && touch /etc/selinux/.autorelabel), then reboot? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199520] [SELinux] "no shell: permission denied" error on fresh Tumbleweed transactional server installation with enforcing SELinux
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1199520 https://bugzilla.suse.com/show_bug.cgi?id=1199520#c19 Felix Niederwanger <felix.niederwanger(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(felix.niederwange | |r(a)suse.com) | --- Comment #19 from Felix Niederwanger <felix.niederwanger(a)suse.com> --- Nope, not installed during this installation: > bsc1199520:~ # zypper se microos-tools > S | Name | Summary | Type > --+---------------+----------------------------------------+-------- > | microos-tools | Files and Scripts for openSUSE MicroOS | package -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202341] Raspi 4 (4GB): boots to blank screen with kernel 5.14.21-150400.24.11-default
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202341 https://bugzilla.suse.com/show_bug.cgi?id=1202341#c6 --- Comment #6 from Patrik Jakobsson <patrik.jakobsson(a)suse.com> --- Hi Ivan, what did you do to fix this for SLE15-SP3? Are those fixes also backported to SLE15-SP4? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203018] VUL-0: CVE-2022-31252: permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203018 Maintenance Automation <maint-coord+maintenance-robot(a)suse.de> changed: What |Removed |Added ---------------------------------------------------------------------------- Priority|P5 - None |P3 - Medium -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1203018] VUL-0: CVE-2022-31252: permissions: chkstat does not check for group-writable parent directories or target files in safeOpen()
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1203018 https://bugzilla.suse.com/show_bug.cgi?id=1203018#c2 Matthias Gerstner <matthias.gerstner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Group|SUSE Security Internal, | |novellonly | Summary|VUL-0: EMBARGOED: |VUL-0: CVE-2022-31252: |CVE-2022-31252: |permissions: chkstat does |permissions: chkstat does |not check for |not check for |group-writable parent |group-writable parent |directories or target files |directories or target files |in safeOpen() |in safeOpen() | --- Comment #2 from Matthias Gerstner <matthias.gerstner(a)suse.com> --- We're fixing this in the open, therefore publishing this bug. I just opened a PR# [1] with a first shot at fixing this in the current C++ code. This also adds test coverage. [1]: https://github.com/openSUSE/permissions/pull/152 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199520] [SELinux] "no shell: permission denied" error on fresh Tumbleweed transactional server installation with enforcing SELinux
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1199520 https://bugzilla.suse.com/show_bug.cgi?id=1199520#c18 Fabian Vogt <fvogt(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(felix.niederwange | |r(a)suse.com) --- Comment #18 from Fabian Vogt <fvogt(a)suse.com> --- Is the microos-tools package installed? That contains the dracut module for proper relabeling. (IMO microos-tools and read-only-root-fs need to be merged together...) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1198523] lvm2.spec %post deletes libdevmapper and triggers kernel panic
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1198523 heming zhao <heming.zhao(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|Kernel panic after latest |lvm2.spec %post deletes |updates on Apr 14, 2022 |libdevmapper and triggers | |kernel panic -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1202676] setools: excessive python deps pulled in
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1202676 https://bugzilla.suse.com/show_bug.cgi?id=1202676#c2 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |CONFIRMED --- Comment #2 from Johannes Segitz <jsegitz(a)suse.com> --- python3-setools is the culprit. We already carry a patch because we now just recommend it instead or requiring it. It would cause a loss of functionality, but 1.2 GB is a huge penalty. I think we can drop it and add a README instructing users to install it manually if they really need it (most people won't) -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1199520] [SELinux] "no shell: permission denied" error on fresh Tumbleweed transactional server installation with enforcing SELinux
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1199520 https://bugzilla.suse.com/show_bug.cgi?id=1199520#c17 --- Comment #17 from Johannes Segitz <jsegitz(a)suse.com> --- I can reproduce it. On a system installed by your instructions SELinux labeling is fully broken. When I run transactional-update setup-selinux it becomes a bit better, but it's still broken. Something is going wrong in the way /etc, /var, /srv and /home are setup. I don't know enough about the special sauce in the transactional setup to understand why and unfortunately my attempts to debug this from within initrd don't work because for some reason the break keyword isn't honored on the command line. @Fabian: You have a lot more experience than I in this environment. Is there documentation that describes how these overlay mounts are created in the initrd? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1201041] python-rpm-macros’s %pyproject_install doesn’t fully work with pip 20.0.2 (default in Leap 15.3 and 15.4)
by bugzilla_noreply＠suse.com 02 Sep '22

02 Sep '22

https://bugzilla.suse.com/show_bug.cgi?id=1201041 Marcus Meissner <meissner(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |meissner(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0