January 2025 - openSUSE Bugs - openSUSE Mailing Lists

[Bug 1235805] New: [Build 20250108-SELinux] openQA test fails in quota
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235805 Bug ID: 1235805 Summary: [Build 20250108-SELinux] openQA test fails in quota Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4762579/modules/quot a/steps/32 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: cathy.hu(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: openQA Blocker: Yes Reproducer: dd if=/dev/zero of=/tmp/quota.img bs=10M count=10 mkfs.ext3 -m0 /tmp/quota.img mkdir /tmp/quota mount -o loop,rw,usrquota,grpquota /tmp/quota.img /tmp/quota mkdir /tmp/quota/test-directory; chmod 777 /tmp/quota/test-directory quotacheck -cug /tmp/quota useradd -m bernhard setquota -u bernhard 100 200 6 10 /tmp/quota systemctl start quotaon\@tmp-quota systemctl status quotaon\@tmp-quota sudo ausearch -m avc -ts 18:00 ---- time->Mon Jan 13 18:21:20 2025 type=AVC msg=audit(1736788880.938:719): avc: denied { quotaon } for pid=7629 comm="quotaon" name="aquota.group" dev="loop1" ino=13 scontext=system_u:system_r:quota_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file permissive=0 ---- time->Mon Jan 13 18:21:20 2025 type=AVC msg=audit(1736788880.938:720): avc: denied { quotaon } for pid=7629 comm="quotaon" name="aquota.user" dev="loop1" ino=12 scontext=system_u:system_r:quota_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file permissive=0 Multiple problems: 1) when quota.img is in /tmp, the default label is <<none>> so no relabeling to fix it (i would say that is an issue in the test) 2) when quota.img is not in /tmp and not in one of the hardcoded paths (e.g. mount point is in /root/quota), the user must label like this: semanage fcontext -a -t quota_db_t /root/quota/aquota.user semanage fcontext -a -t quota_db_t /root/quota/aquota.group https://gitlab.suse.de/selinux/selinux-policy/-/blob/factory/policy/modules… 3) then, when this is done, it does a kmod request (which we will need to fix on the policy side): ---- time->Mon Jan 13 18:33:16 2025 type=AVC msg=audit(1736789596.014:773): avc: denied { module_request } for pid=7801 comm="quotaon" kmod="quota_v2" scontext=system_u:system_r:quota_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=0 ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_textmode@64bit fails in [quota](https://openqa.opensuse.org/tests/4762579/modules/quota/steps/32) ## Test suite description Maintainer: slindomansilla(a)suse.de. Mainly post-installation console extra tests. ## Reproducible Fails since (at least) Build [20240702](https://openqa.opensuse.org/tests/4315747) ## Expected result Last good: [20240611](https://openqa.opensuse.org/tests/4267371) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 1

[Bug 1235025] GNOME:Factory/xdg-desktop-portal: Bug KDE desktop using GTK fallback since update
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235025 https://bugzilla.suse.com/show_bug.cgi?id=1235025#c7 pallas wept <pallaswept(a)proton.me> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|IN_PROGRESS |RESOLVED Resolution|--- |FIXED --- Comment #7 from pallas wept <pallaswept(a)proton.me> --- The patches have now been implemented upstream, and updated or patched packages are in today's snapshot 20250112. Bjørn Lie is the person responsible for fixing all this for us, thanks mate! -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234308] dracut (yast2 online_update) fails silently when /boot is full
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234308 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234308] dracut (yast2 online_update) fails silently when /boot is full
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234308 https://bugzilla.suse.com/show_bug.cgi?id=1234308#c16 Martin Wilck <martin.wilck(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |IN_PROGRESS --- Comment #16 from Martin Wilck <martin.wilck(a)suse.com> --- s-m-t with Antonio's patch is on the way to factory. I've also added the backport from comment 15 to SP7. However, even though the risk of making this change is rather low (comment 13), it is a change behavior in a rather frequently used code path that may cause breakage in end user installments. Therefore I am kind of reluctant to apply it to already-released service packs. At least I'd like to make sure everybody agrees before publishing it to SP5 and SP6. Opinions? -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235453] New: system-user-qemu Installation Failure Due to GID Collision
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235453 Bug ID: 1235453 Summary: system-user-qemu Installation Failure Due to GID Collision Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: x86-64 OS: openSUSE Tumbleweed Status: NEW Severity: Normal Priority: P5 - None Component: Virtualization:Tools Assignee: virt-bugs(a)suse.de Reporter: sangeetha.thackarajan(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- Fabian Vogt's analysis indicates that system-user-qemu is likely broken. It attempts to force a GID within the SYS_GID_MIN-SYS_GID_MAX range, which conflicts with GIDs already used by system-group-hardware. Can be reproduced with ``` # zypper --installroot $PWD/root in --no-recommends busybox system-group-hardware # cat $PWD/root/etc/group root:x:0: shadow:x:15: trusted:x:42: users:x:100: kmem:x:101: lock:x:102: tty:x:5: utmp:x:103: audio:x:104: cdrom:x:105: dialout:x:106: disk:x:107: input:x:108: lp:x:109: render:x:110: sgx:x:111: tape:x:112: video:x:113: kvm:x:36: # zypper --installroot $PWD/root in --no-recommends system-user-qemu ... /usr/bin/busybox addgroup -S -g 107 qemu addgroup: gid '107' in use error: %prein(system-user-qemu-20170617-150400.24.2.1.noarch) scriptlet failed, exit status 1 error: system-user-qemu-20170617-150400.24.2.1.noarch: install failed # rpm -ql --scripts system-user-qemu preinstall scriptlet (using /bin/sh): /usr/sbin/sysusers2shadow %3 <<"EOF" || [ -f /.buildenv ] g qemu 107 u qemu 107 "qemu user" m qemu kvm EOF /usr/lib/sysusers.d/system-user-qemu.conf # ``` -- You are receiving this mail because: You are on the CC list for the bug.

1 8

[Bug 1234308] dracut (yast2 online_update) fails silently when /boot is full
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234308 https://bugzilla.suse.com/show_bug.cgi?id=1234308#c15 --- Comment #15 from Martin Wilck <martin.wilck(a)suse.com> --- Created attachment 879576 --> https://bugzilla.suse.com/attachment.cgi?id=879576&action=edit regenerate-initrd-posttrans: return error if regenerating all initrds fails (bsc#1234308) Backport of Antonio's patch to SLE15-SP7. Much simpler, because there's no mkosi in SLE15. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235605] gtk3-branding-openSUSE blocks install of update of libgtk-3-0
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235605 https://bugzilla.suse.com/show_bug.cgi?id=1235605#c4 --- Comment #4 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-RU-2025:0010-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1234791,1235240,1235605 CVE References: JIRA References: Sources used: openSUSE Leap 15.6 (src): gtk3-branding-openSUSE-15.0-lp156.4.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235240] "openSUSE-SLE-15.6-2025-31(1)" fails to install
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235240 https://bugzilla.suse.com/show_bug.cgi?id=1235240#c12 --- Comment #12 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-RU-2025:0010-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1234791,1235240,1235605 CVE References: JIRA References: Sources used: openSUSE Leap 15.6 (src): gtk3-branding-openSUSE-15.0-lp156.4.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234791] [Build :36846:gtk3] openQA test fails in updates_packagekit_gpk - the installed gtk3-branding-openSUSE-15.0-lp156.3.3.noarch requires 'libgtk-3-0=3.24.38+111'
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1234791 https://bugzilla.suse.com/show_bug.cgi?id=1234791#c2 --- Comment #2 from Marcus Meissner <meissner(a)suse.com> --- openSUSE-RU-2025:0010-1: An update that has three recommended fixes can now be installed. Category: recommended (moderate) Bug References: 1234791,1235240,1235605 CVE References: JIRA References: Sources used: openSUSE Leap 15.6 (src): gtk3-branding-openSUSE-15.0-lp156.4.4.1 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1235801] New: [Build 20250108-SELinux] openQA test fails in samba server
by bugzilla_noreply＠suse.com 13 Jan '25

13 Jan '25

https://bugzilla.suse.com/show_bug.cgi?id=1235801 Bug ID: 1235801 Summary: [Build 20250108-SELinux] openQA test fails in samba server Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/4762511/modules/serv er/steps/31 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: cathy.hu(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1230118 Target Milestone: --- Found By: openQA Blocker: Yes type=AVC msg=audit(1736523835.437:279): avc: denied { create } for pid=1956 comm="nmbd" name="nmbd.pid" scontext=system_u:system_r:nmbd_t:s0 tcontext=system_u:object_r:smbd_var_run_t:s0 tclass=file permissive=0 type=AVC msg=audit(1736523836.139:282): avc: denied { setgid } for pid=1980 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 type=AVC msg=audit(1736523836.779:292): avc: denied { setgid } for pid=2002 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 type=AVC msg=audit(1736523837.417:302): avc: denied { setgid } for pid=2023 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 type=AVC msg=audit(1736523838.046:312): avc: denied { setgid } for pid=2044 comm="rpcd_lsad" capability=6 scontext=system_u:system_r:winbind_t:s0 tcontext=system_u:system_r:winbind_t:s0 tclass=capability permissive=0 ## Observation openQA test in scenario opensuse-Tumbleweed-DVD-x86_64-extra_tests_filesystem@64bit fails in [server](https://openqa.opensuse.org/tests/4762511/modules/server/steps/31) ## Test suite description Maintainer: QE Core Filesystem related tests, for example snapper and btrfs features. ## Reproducible Fails since (at least) Build [20250108-SELinux](https://openqa.opensuse.org/tests/4761196) ## Expected result Last good: [20250108](https://openqa.opensuse.org/tests/4758427) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensus… -- You are receiving this mail because: You are on the CC list for the bug.

1 1