April 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1223599] New: selinux: systemd-fstab-generator can't read credentials
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223599 Bug ID: 1223599 Summary: selinux: systemd-fstab-generator can't read credentials Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: lnussel(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- running qemu with something like -fsdev local,security_model=none,id=fsdev0,path=/home/ln/git -device virtio-9p-pci,id=fs0,fsdev=fsdev0,mount_tag=git -smbios type=11,value=io.systemd.credential.binary:fstab.extra=Z2l0IC9ydW4vcWVtdS9naXQgOXAgdHJhbnM9dmlydGlvLHZlcnNpb249OXAyMDAwLkwK In order to mount a directory from the host into the VM results in selinux violations from systemd-fstab-generator. Looks like the policy disallows it to read/run/credentials/(a)system/fstab.extra Apr 30 14:38:33 localhost kernel: audit: type=1400 audit(1714487912.626:6): avc: denied { map_read map_write } for pid=485 comm="systemd-fstab-g" scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=bpf permissive=0 Apr 30 14:38:33 localhost kernel: audit: type=1400 audit(1714487912.659:8): avc: denied { read } for pid=485 comm="systemd-fstab-g" name="fstab.extra" dev="tmpfs" ino=2 scontext=system_u:system_r:systemd_fstab_generator_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=0 Apr 30 14:38:33 localhost (sd-exec-[480]: /usr/lib/systemd/system-generators/systemd-fstab-generator failed with exit status 1. Apr 30 14:38:32 localhost systemd-fstab-generator[485]: Failed read unencrypted credential 'fstab.extra': Permission denied -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1223599] selinux: systemd-fstab-generator can't read credentials
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223599 https://bugzilla.suse.com/show_bug.cgi?id=1223599#c1 Filippo Bonazzi <filippo.bonazzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |filippo.bonazzi(a)suse.com, | |lnussel(a)suse.com Flags| |needinfo?(lnussel(a)suse.com) --- Comment #1 from Filippo Bonazzi <filippo.bonazzi(a)suse.com> --- This could be a duplicate of bug 1222736. Can you test with the policy in security:SELinux? https://build.opensuse.org/package/show/security:SELinux/selinux-policy We have a couple of changes in the devel project which have not made their way to Factory yet ATM, we are still testing some large changes and Cathy is away for a couple of weeks. We hope to submit soon. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1173969] PgAdmin4 cannot connect to server
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1173969 Gabriele Sonnu <gabriele.sonnu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gabriele.sonnu(a)suse.com -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1223548] Renoir/Cezanne Crashing on 3D Game/Project Usage Randomly but Frequently - NOT PRESENT ON OTHER OS
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223548 https://bugzilla.suse.com/show_bug.cgi?id=1223548#c1 Takashi Iwai <tiwai(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |tiwai(a)suse.com --- Comment #1 from Takashi Iwai <tiwai(a)suse.com> --- If PopOS kernel works, you can compare the difference -- either the difference of the kernel base version (where Tumbleweed is always newer), some downstream patches, firmware issue, or depending on Mesa or whatever. Without those data points, we can't help much, unfortunately. If you're willing to chase the bugs yet on Tumbleweed, we can continue, e.g. I can build a test kernel Mario suggested in the upstream bug tracker. If not interested, we have to close this bug entry, as there is no point to go further. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221211] /usr/lib64/libserf-1.so.1: undefined reference to `ERR_GET_FUNC'
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1221211 https://bugzilla.suse.com/show_bug.cgi?id=1221211#c13 Danilo Spinella <danilo.spinella(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(danilo.spinella@s | |use.com) | --- Comment #13 from Danilo Spinella <danilo.spinella(a)suse.com> --- (In reply to Manfred Hollstein from comment #10) > (In reply to Max Lin from comment #9) > > Hello Danilo, libserf has fork in SUSE:SLE-15-SP6:GA, a maint update would > > not replace it, the same change Andreas pointed out needs submit to > > SUSE:SLE-15-SP6:GA as well. > > Danilo, Max, what's the status of this issue? If the fixed libserf must go > into GA media, I guess, it's time to move... Hello Manfred, I'll take a look at this as soon as possible, I need to check if we are in time to submit to 15-SP6:GA. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1220905] New: salt-master: Error loading known_hosts
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1220905 Bug ID: 1220905 Summary: salt-master: Error loading known_hosts Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Python Assignee: python-maintainers(a)suse.com Reporter: egotthold(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- This error is happening to me on openSUSE MicroOS 20240302 (the logs reveal this has been happening for a good while already). The error is known upstream and is due to a combination of changes in pygit2 and how Salt is starting up its daemon. https://github.com/saltstack/salt/issues/64121#issuecomment-1705658539 Since we are not using the onedir packaging yet one cannot downgrade to another pygit2 version via salt-pip. I am not that deep into the codebase to know if a systemd drop-in that specifies the user used for running the salt-master.service as "salt", is enough. The log of the salt-master is spammed with the following message: Mar 04 00:01:51 esprimo-1 salt-master[30997]: [ERROR ] Error occurred fetching git_pillar remote 'main git(a)gitlab.com:<user>/<repo>.git': error loading known_hosts: Mar 04 00:01:51 esprimo-1 salt-master[30997]: Traceback (most recent call last): Mar 04 00:01:51 esprimo-1 salt-master[30997]: File "/usr/lib/python3.11/site-packages/salt/utils/gitfs.py", line 1996, in _fetch Mar 04 00:01:51 esprimo-1 salt-master[30997]: fetch_results = origin.fetch(**fetch_kwargs) Mar 04 00:01:51 esprimo-1 salt-master[30997]: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^ Mar 04 00:01:51 esprimo-1 salt-master[30997]: File "/usr/lib64/python3.11/site-packages/pygit2/remotes.py", line 155, in fetch Mar 04 00:01:51 esprimo-1 salt-master[30997]: payload.check_error(err) Mar 04 00:01:51 esprimo-1 salt-master[30997]: File "/usr/lib64/python3.11/site-packages/pygit2/callbacks.py", line 99, in check_error Mar 04 00:01:51 esprimo-1 salt-master[30997]: check_error(error_code) Mar 04 00:01:51 esprimo-1 salt-master[30997]: File "/usr/lib64/python3.11/site-packages/pygit2/errors.py", line 65, in check_error Mar 04 00:01:51 esprimo-1 salt-master[30997]: raise GitError(message) Mar 04 00:01:51 esprimo-1 salt-master[30997]: _pygit2.GitError: error loading known_hosts: -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1223583] gdm dbus config references non existing user
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1223583 https://bugzilla.suse.com/show_bug.cgi?id=1223583#c2 --- Comment #2 from Marcus Rückert <mrueckert(a)suse.com> --- well we could comment out the section until the WIP state for the part is done and make the whole startup process less noisy. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1222873] yast2_userman.xml still refers to removed 'Secondary Groups' UI
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1222873 https://bugzilla.suse.com/show_bug.cgi?id=1222873#c3 Tomáš Bažant <tbazant(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|IN_PROGRESS |RESOLVED --- Comment #3 from Tomáš Bažant <tbazant(a)suse.com> --- fixed by https://github.com/SUSE/doc-sle/commit/1da7a37d657a7ace2a6e644365bbe873c509… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1160672] mingw*-runtime + winpthreads does not build reproducibly
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=1160672 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- OS|openSUSE Factory |All Assignee|fstrba(a)suse.com |screening-team-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 948280] windows:mingw:win{32,64}/mingw{32,64}-filesystem: Add hardening options?
by bugzilla_noreply＠suse.com 30 Apr '24

30 Apr '24

https://bugzilla.suse.com/show_bug.cgi?id=948280 Fridrich Strba <fstrba(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|fstrba(a)suse.com |screening-team-bugs(a)suse.de -- You are receiving this mail because: You are on the CC list for the bug.

1 0