July 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1222736] [SELinux] systemd-gpt-auto-generator blocked by SELinux
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1222736 https://bugzilla.suse.com/show_bug.cgi?id=1222736#c4 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |felix.niederwanger(a)suse.com --- Comment #4 from Johannes Segitz <jsegitz(a)suse.com> --- *** Bug 1227516 has been marked as a duplicate of this bug. *** -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1221348] New: SELinux: relabeling after reboot is not communicated to user
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1221348 Bug ID: 1221348 Summary: SELinux: relabeling after reboot is not communicated to user Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: jsegitz(a)suse.com Reporter: rfrohl(a)suse.com QA Contact: qa-bugs(a)suse.de CC: cathy.hu(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Hi, if the SELinux policy is updated and the system reboots, the system gets relabeled. But this is not communicated to the user, it just looks like the system is stuck during boot. Especially with MicroOS the user might not know what was part of the last update. If the system is stuck during boot some users might not know that they use SELinux and where the wait is coming from. From a usability point of view: would it be possible to print a message that the system is currently relabeling the filesystem and maybe also add a message that it is done ? Second part might not be strictly needed, but I think some messaging might be helpful for users. -- You are receiving this mail because: You are on the CC list for the bug.

1 3

[Bug 1228223] The systemd-devel-32bit package is missing
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1228223 https://bugzilla.suse.com/show_bug.cgi?id=1228223#c2 --- Comment #2 from Franck Bui <fbui(a)suse.com> --- If that's correct, it's probably a regression, which has been introduced when libudev-devel has been merged into systemd-devel. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228223] The systemd-devel-32bit package is missing
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1228223 https://bugzilla.suse.com/show_bug.cgi?id=1228223#c1 Franck Bui <fbui(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |fbui(a)suse.com --- Comment #1 from Franck Bui <fbui(a)suse.com> --- Just to make sure I understood: you're basically saying that wine 32bit has lost its plug and play support due to the fact that the symlink libudev.so can't be found anymore in any systemd 32bit packages. Is that correct ? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212949] sshuttle.service: sshuttle: sudo: The "no new privileges" flag is set, which prevents sudo from running as root.
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1212949 https://bugzilla.suse.com/show_bug.cgi?id=1212949#c7 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Resolution|--- |FIXED Status|NEW |RESOLVED --- Comment #7 from Johannes Segitz <jsegitz(a)suse.com> --- updates released -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212963] AUDIT-0: review of selinux policy for kanidm-unixd tools and clients
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1212963 https://bugzilla.suse.com/show_bug.cgi?id=1212963#c4 Johannes Segitz <jsegitz(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |william.brown(a)suse.com Flags| |needinfo?(william.brown@sus | |e.com) --- Comment #4 from Johannes Segitz <jsegitz(a)suse.com> --- so that has been going on for a while ... William, did you have a chance to test the latest state I build for you in my repos? I would like to get this in our main policy ASAP -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1193633] nagios - fails to start due to systemd hardening changes
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1193633 https://bugzilla.suse.com/show_bug.cgi?id=1193633#c3 --- Comment #3 from Johannes Segitz <jsegitz(a)suse.com> --- still open. Lars, do you want to change this? I can submit for this, but I would like to get your opinions first -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228425] Trace in sysfs during setup of hvc with kernel-source 6.10.2-1.1
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1228425 https://bugzilla.suse.com/show_bug.cgi?id=1228425#c12 --- Comment #12 from Sarah Kriesch <ada.lovelace(a)gmx.de> --- Thanks for the verification, Miroslav. @Heiko You can send the fix upstream to the Linux kernel. We are living "upstream first" (equal to Debian and Fedora). The Kernel Maintainers will update our packages then, and I will close this bug report as soon as the patch passes our openQA tests and all tests are green again. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228373] New: supermin regression in Tumbleweed / Factory causes virt-inspector to fail
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1228373 Bug ID: 1228373 Summary: supermin regression in Tumbleweed / Factory causes virt-inspector to fail Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: claudio.fontana(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- I was surprised by a supermin regression on Factory. export LIBGUESTFS_DEBUG=1 export LIBGUESTFS_TRACE=1 virt-inspector --verbose --no-applications --no-icon /153-RAID0/datastore2/centos9/centos9.vmdk libguestfs: run supermin libguestfs: command: run: /usr/bin/supermin libguestfs: command: run: \ --build libguestfs: command: run: \ --verbose libguestfs: command: run: \ --if-newer libguestfs: command: run: \ --lock /var/tmp/.guestfs-0/lock libguestfs: command: run: \ --copy-kernel libguestfs: command: run: \ -f ext2 libguestfs: command: run: \ --host-cpu x86_64 libguestfs: command: run: \ /usr/lib64/guestfs/supermin.d libguestfs: command: run: \ -o /var/tmp/.guestfs-0/appliance.d supermin: version: 5.3.4 supermin: rpm: detected RPM version 4.19 supermin: rpm: detected RPM architecture x86_64 supermin: rpm: detected zypper version 1.14.76 supermin: package handler: opensuse/rpm supermin: acquiring lock on /var/tmp/.guestfs-0/lock supermin: rpm: cannot locate RPM database; if this is a normal RPM-based Linux distro then this is probably a supermin bug libguestfs: error: /usr/bin/supermin exited with error status 1, see debug messages above libguestfs: trace: launch = -1 (error) -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1228425] Trace in sysfs during setup of hvc with kernel-source 6.10.2-1.1
by bugzilla_noreply＠suse.com 31 Jul '24

31 Jul '24

https://bugzilla.suse.com/show_bug.cgi?id=1228425 https://bugzilla.suse.com/show_bug.cgi?id=1228425#c11 --- Comment #11 from Miroslav Franc <miroslav.franc(a)suse.com> --- (In reply to LTC BugProxy from comment #10) > ------- Comment From h.carstens(a)de.ibm.com 2024-07-31 10:38 EDT------- > > If you take my word for it, the patch fixes it. I just tested it. I assume > > Heiko Carstens will send the patch upstream and once I have some upstream > > reference, I will push it to stable branch. > > Yes, I will take care of upstreaming this. > If you want to have Tested-by and/or Reported-by tags please provide them > here, and I'll add them to the patch. > > Thanks a lot for reporting, analyzing, and verifying! Thanks a lot. AFAIC I don't need those tags. -- You are receiving this mail because: You are on the CC list for the bug.

1 0