August 2024 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1228380] [SELinux] extreme grub error flood, grub2-mkrelpath and grub2-script-check
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228380 Cathy Hu <cathy.hu(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Blocks| |1228745 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1196342] docker iptables chain missing
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1196342 https://bugzilla.suse.com/show_bug.cgi?id=1196342#c3 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alexandre.vicenzi(a)suse.com Resolution|--- |WONTFIX Status|NEW |RESOLVED --- Comment #3 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- Leap 15.3 is EOL. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1196310] Cannot run docker daemon - iptables target DOCKER missing
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1196310 https://bugzilla.suse.com/show_bug.cgi?id=1196310#c8 Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Assignee|containers-bugowner(a)suse.de |alexandre.vicenzi(a)suse.com Status|NEW |RESOLVED Resolution|--- |WONTFIX CC| |alexandre.vicenzi(a)suse.com, | |containers-bugowner(a)suse.de --- Comment #8 from Alexandre Vicenzi <alexandre.vicenzi(a)suse.com> --- Leap 15.3 is EOL. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228621] [Build 9.32] openSUSE agama live installer iso failed to boot for dracut report error and entered emergency mode
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228621 https://bugzilla.suse.com/show_bug.cgi?id=1228621#c10 Antonio Feijoo <antonio.feijoo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags|needinfo?(thomas.blume@suse | |.com) | Assignee|dracut-maintainers(a)suse.de |yast-internal(a)suse.de --- Comment #10 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- (In reply to Antonio Feijoo from comment #8) > Created attachment 876430 [details] > livenetroot.sh extracted from > agama-installer-openSUSE.s390x-9.0.0-openSUSE-Build9.34.iso/boot/s390x/initrd > > The following code is not shipped by dracut, compare it with > https://github.com/openSUSE/dracut/blob/SUSE/059/modules.d/90livenet/ > livenetroot.sh > > ``` > $ diff agama-initrd/sbin/livenetroot > ~/SUSE/059/modules.d/90livenet/livenetroot.sh > 18,28d17 > < let memsize=$(($(sed -n "s/MemTotal: *$[[:digit:]]*$.*/\1/p" > /proc/meminfo) / 1024)) > < let imgsize=$(($(curl -sI "$liveurl" | sed -n "s/Content-Length: > *$[[:digit:]]*$.*/\1/p") / (1024 * 1024))) > < > < if [ $((memsize - imgsize)) -lt 1024 ]; then > < sed -i 'N;/echo "$RDSOSREPORT"/s/echo$/echo\ > < echo Warning!!!\ > < echo The memory size of your system is too small for this live > image.\ > < echo Expect killed processes due to out of memory conditions.\ > < echo /' usr/bin/dracut-emergency > < emergency_shell > < fi > ``` > > I have no idea who/what is modifying livenetroot.sh... Thomas, since you've > worked with this in the past, have you added any patches to any installation > packages that modify the dracut code? Ok, I found it: https://github.com/openSUSE/agama/blob/master/live/src/images.sh Reassigning to the agama team, I hope the email address is correct. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228425] Trace in sysfs during setup of hvc with kernel-source 6.10.2-1.1
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228425 https://bugzilla.suse.com/show_bug.cgi?id=1228425#c13 --- Comment #13 from LTC BugProxy <bugproxy(a)us.ibm.com> --- ------- Comment From WINTERA(a)de.ibm.com 2024-08-01 07:04 EDT------- FYI, a simple way to detect the problem / verify the fix: Symptom: In a z/VM guest you expect: > ls /sys/devices/iucv/ hvc_iucv0/ uevent But instead you see e.g.: > ls /sys/devices/iucv/ hvc_iucv8780520/ uevent -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1212963] AUDIT-0: review of selinux policy for kanidm-unixd tools and clients
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1212963 https://bugzilla.suse.com/show_bug.cgi?id=1212963#c6 --- Comment #6 from Johannes Segitz <jsegitz(a)suse.com> --- Okay :) https://gitlab.suse.de/selinux/selinux-policy/-/merge_requests/76 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228621] [Build 9.32] openSUSE agama live installer iso failed to boot for dracut report error and entered emergency mode
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228621 https://bugzilla.suse.com/show_bug.cgi?id=1228621#c9 --- Comment #9 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- BTW, this is reported against Leap 16, but the log shows: ``` '[ 0.604748][ T1] systemd[1]: Running in initrd. ', 'Welcome to openSUSE Tumbleweed dracut-059+suse.628.g20b345b4-1.1 (Initramfs)! ', ``` It it were Leap 16, the following commits would be missing from its code base: - https://github.com/openSUSE/dracut/commit/469faf76c26f80780ca85f17f45942cc7… - https://github.com/openSUSE/dracut/commit/a572e23f2c5c7ccd43a2216eae51be858… - https://github.com/openSUSE/dracut/commit/87c8f82d3ea7412213597a4b072ca4c8f… -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228621] [Build 9.32] openSUSE agama live installer iso failed to boot for dracut report error and entered emergency mode
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228621 https://bugzilla.suse.com/show_bug.cgi?id=1228621#c8 Antonio Feijoo <antonio.feijoo(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo?(thomas.blume@suse | |.com) CC| |thomas.blume(a)suse.com --- Comment #8 from Antonio Feijoo <antonio.feijoo(a)suse.com> --- Created attachment 876430 --> https://bugzilla.suse.com/attachment.cgi?id=876430&action=edit livenetroot.sh extracted from agama-installer-openSUSE.s390x-9.0.0-openSUSE-Build9.34.iso/boot/s390x/initrd The following code is not shipped by dracut, compare it with https://github.com/openSUSE/dracut/blob/SUSE/059/modules.d/90livenet/livene… ``` $ diff agama-initrd/sbin/livenetroot ~/SUSE/059/modules.d/90livenet/livenetroot.sh 18,28d17 < let memsize=$(($(sed -n "s/MemTotal: *$[[:digit:]]*$.*/\1/p" /proc/meminfo) / 1024)) < let imgsize=$(($(curl -sI "$liveurl" | sed -n "s/Content-Length: *$[[:digit:]]*$.*/\1/p") / (1024 * 1024))) < < if [ $((memsize - imgsize)) -lt 1024 ]; then < sed -i 'N;/echo "$RDSOSREPORT"/s/echo$/echo\ < echo Warning!!!\ < echo The memory size of your system is too small for this live image.\ < echo Expect killed processes due to out of memory conditions.\ < echo /' usr/bin/dracut-emergency < emergency_shell < fi ``` I have no idea who/what is modifying livenetroot.sh... Thomas, since you've worked with this in the past, have you added any patches to any installation packages that modify the dracut code? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1228380] [SELinux] extreme grub error flood, grub2-mkrelpath and grub2-script-check
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1228380 https://bugzilla.suse.com/show_bug.cgi?id=1228380#c7 --- Comment #7 from pallas wept <pallaswept(a)proton.me> --- (In reply to Cathy Hu from comment #6) > does `ls -alZ /usr/lib/snapper/plugins/grub` show you > snapper_grub_plugin_exec_t as type? It wasn't! You're a genius. > if not try `touch /.autorelabel` and reboot and check if AVCs are still > there. That's fixed it. I'm sure I did this during installation, it was in the instructions and it took a long time and I was sweating the whole time, I could not forget it :D > also, could you please attach the AVCs? thanks a lot! I'm sorry I'm a bit noob at this, would you mind telling me the command to get the file to attach? I was going to attach the output of ` sudo ausearch -m AVC,USER_AVC -c snapper -c grub >~/Desktop/ausearch.txt ` It's ~7MB and I feel like maybe I'm doing it wrong, perhaps there's a way to filter out all the dupes? I could filter it to just today, and that will capture all the different states. While I have been writing this, I have noticed a new grub-/snapper related message which has appeared since the relabel. This shows the two messages which I reported here, then it stops when I added that module earlier, then just before 19:17, I remove it, touch /.autorelabel, and reboot. Since then I am seeing bursts of the last alert over and over ---- time->Thu Aug 1 13:00:06 2024 type=AVC msg=audit(1722481206.970:1967): avc: denied { execute_no_trans } for pid=48339 comm="grub" path="/usr/bin/grub2-mkrelpath" dev="nvme0n1p2" ino=4261726 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:bootloader_exec_t:s0 tclass=file permissive=0 ---- time->Thu Aug 1 13:00:06 2024 type=AVC msg=audit(1722481206.970:1968): avc: denied { execute_no_trans } for pid=48342 comm="grub" path="/usr/bin/grub2-script-check" dev="nvme0n1p2" ino=4261732 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:bootloader_exec_t:s0 tclass=file permissive=0 ---- time->Thu Aug 1 19:17:34 2024 type=AVC msg=audit(1722503854.212:204): avc: denied { search } for pid=14253 comm="grub" name="nscd" dev="tmpfs" ino=4234 scontext=system_u:system_r:snapper_grub_plugin_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir permissive=0 ---- time->Thu Aug 1 19:17:34 2024 type=AVC msg=audit(1722503854.212:205): avc: denied { search } for pid=14253 comm="grub" name="nscd" dev="tmpfs" ino=4234 scontext=system_u:system_r:snapper_grub_plugin_t:s0 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=dir permissive=0 ---- This looks different, is less in volume, and the original two messages are gone, should I file a new bug for that? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1225397] New: postfix gives warnings about deprecated parameters
by bugzilla_noreply＠suse.com 01 Aug '24

01 Aug '24

https://bugzilla.suse.com/show_bug.cgi?id=1225397 Bug ID: 1225397 Summary: postfix gives warnings about deprecated parameters Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Network Assignee: screening-team-bugs(a)suse.de Reporter: freek(a)opensuse.org QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- postfix gives warnings about deprecated parameters May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtp_enforce_tls" will be removed; instead, specify "smtp_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtpd_enforce_tls" will be removed; instead, specify "smtpd_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtp_use_tls" will be removed; instead, specify "smtp_tls_security_level" May 27 12:27:56 localhost.localdomain cond_slp[1447]: /usr/sbin/postconf: warning: /etc/postfix/main.cf: support for parameter "smtpd_use_tls" will be removed; instead, specify "smtpd_tls_security_level" These parameters are introduced in /sbin/config.postfix The attached patch file removes this introduction, the replacements are already present in config.postfix. Also a bug in the naming of backups in /var/adm/backups/postfix is addressed. In principle "$POSTFIX_SMTP_TLS_CLIENT" == "must" should not be expanded in $PCONF -e "smtp_tls_security_level = encrypt". This is a global definition. It should be expanded in smtp_tls_policy_maps = lmdb:/etc/postfix/tls_policy and only for specific destinations in /etc/postfix/tls_policy. So the possibility "must" should be accompanied by specific destinations. -- You are receiving this mail because: You are on the CC list for the bug.

1 6