- openSUSE Bugs

[Bug 1234728] New: Bottles does not behave according to maintainer Vision
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234728 Bug ID: 1234728 Summary: Bottles does not behave according to maintainer Vision Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: PC OS: openSUSE Tumbleweed Status: NEW Severity: Major Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: p.nymname(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- As described in https://github.com/bottlesdevs/Bottles/pull/3583 bottles is supposed to exit when not running sandboxed. Please read and adjust your package accordingly to match upstream maintainer vision and restore expected app behavior, thank you. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1233358] New: [SELinux] AVC denial for sdbootutil during snapper cleanup
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1233358 Bug ID: 1233358 Summary: [SELinux] AVC denial for sdbootutil during snapper cleanup Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: fvogt(a)suse.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- On my Tumbleweed system with systemd-boot + TPM backed FDE and the SELinux targeted policy in enforcing mode, I found some AVC denials which were triggered by snapper-cleanup.service. snapper cleanup runs sdbootutil which in turn executes systemd-pcrlock: type=AVC msg=audit(14.11.2024 10:13:13.145:227) : avc: denied { execute } for pid=6038 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.145:228) : avc: denied { execute } for pid=6038 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.319:229) : avc: denied { execute } for pid=6082 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.319:230) : avc: denied { execute } for pid=6082 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.482:231) : avc: denied { execute } for pid=6126 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.482:232) : avc: denied { execute } for pid=6126 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.652:233) : avc: denied { execute } for pid=6170 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.652:234) : avc: denied { execute } for pid=6170 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.829:235) : avc: denied { execute } for pid=6214 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.829:236) : avc: denied { execute } for pid=6214 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.999:237) : avc: denied { execute } for pid=6258 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:13.999:238) : avc: denied { execute } for pid=6258 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:14.175:239) : avc: denied { execute } for pid=6302 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 type=AVC msg=audit(14.11.2024 10:13:14.175:240) : avc: denied { execute } for pid=6302 comm=sdbootutil name=systemd-pcrlock dev="dm-0" ino=659797 scontext=system_u:system_r:snapperd_t:s0 tcontext=system_u:object_r:systemd_pcrlock_exec_t:s0 tclass=file permissive=0 -- You are receiving this mail because: You are on the CC list for the bug.

1 19

[Bug 1234709] New: static-initrd: embeds random tmpdir
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234709 Bug ID: 1234709 Summary: static-initrd: embeds random tmpdir Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: All Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: bwiedemann(a)suse.com QA Contact: qa-bugs(a)suse.de Blocks: 1062303 Target Milestone: --- Found By: Development Blocker: --- While working on reproducible builds for openSUSE, I found that our static-initrd:base package varies in every build, with such a diff: --- old//usr/share/initrd/static-initrd-base-6.11.8-1-default.unsigned.cpio/usr/lib/dracut/build-parameter.txt 2024-12-19 09:14:55.079200953 +0000 +++ new//usr/share/initrd/static-initrd-base-6.11.8-1-default.unsigned.cpio/usr/lib/dracut/build-parameter.txt 2024-12-19 09:14:55.367202831 +0000 @@ -1 +1 @@ - --confdir '/tmp/tmp.k0puBDnkWn' --kernel-image '/boot/vmlinuz' --kver '6.11.8-1-default' --kmoddir '/lib/modules/6.11.8-1-default' --fwdir '/lib/firmware' --no-hostonly --no-hostonly-cmdline --no-hostonly-default-device --conf './dracut.conf' --kernel-cmdline 'rw security=apparmor rd.multipath=0' --omit 'iscsi lunmask multipath memstrack' --xz --show-modules --add-drivers 'fat vfat' --filesystems 'vfat ext4 xfs btrfs overlay' + --confdir '/tmp/tmp.OQ9MWRE5Lv' --kernel-image '/boot/vmlinuz' --kver '6.11.8-1-default' --kmoddir '/lib/modules/6.11.8-1-default' --fwdir '/lib/firmware' --no-hostonly --no-hostonly-cmdline --no-hostonly-default-device --conf './dracut.conf' --kernel-cmdline 'rw security=apparmor rd.multipath=0' --omit 'iscsi lunmask multipath memstrack' --xz --show-modules --add-drivers 'fat vfat' --filesystems 'vfat ext4 xfs btrfs overlay' because: static-initrd.spec:228 has dracut \ --confdir $(mktemp -d) \ -- You are receiving this mail because: You are on the CC list for the bug.

1 4

[Bug 1234709] static-initrd: embeds random tmpdir
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234709 https://bugzilla.suse.com/show_bug.cgi?id=1234709#c3 --- Comment #3 from Valentin Lefebvre <valentin.lefebvre(a)suse.com> --- (In reply to Bernhard Wiedemann from comment #1) > Additionally > /usr/share/initrd/static-initrd-base-6.11.8-1-default.unsigned > has variations in mtimes. > > The dracut --reproducible option helps there. > > https://build.opensuse.org/requests/1232164 has a fix for both issues. Thanks for the change. I have accepted the resuest. (In reply to Bernhard Wiedemann from comment #2) > found some more diffs in the generic part: I will check if it is possible to make the static-initrd build more reproducible -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234724] New: Installer page declares "Over 40GB of free hard drive space" are required for installation, but 6 - 9 GB suffice
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234724 Bug ID: 1234724 Summary: Installer page declares "Over 40GB of free hard drive space" are required for installation, but 6 - 9 GB suffice Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: kaykaykay123(a)gmail.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- Pages https://get.opensuse.org/tumbleweed/#download and https://get.opensuse.org/leap/15.6/#download at "System Requirements" heading declare that "Over 40GB of free hard drive space" are required for installation. In fact, it is possible to install openSUSE on 6 - 9 GB part of hard drive and get dual boot with Windows on 32 GB drive. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1234723] New: Link to Live images is not available on download page for Leap 15.6
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234723 Bug ID: 1234723 Summary: Link to Live images is not available on download page for Leap 15.6 Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Installation Assignee: yast2-maintainers(a)suse.de Reporter: kaykaykay123(a)gmail.com QA Contact: jsrain(a)suse.com Target Milestone: --- Found By: --- Blocker: --- At page https://get.opensuse.org/tumbleweed/#download we can see string "We also have Minimal Virtual Machine, Live images. Check out Alternative Downloads!" , which has link to additional images and downloads. These string and link are not available for Leap 15.6, but additional images and downloads are available in fact. For instance, https://download.opensuse.org/download/distribution/openSUSE-stable/live/ for Live images, https://download.opensuse.org/download/distribution/openSUSE-stable/applian… for some other downloads. Related issues: https://github.com/openSUSE/get-o-o/pull/224 https://github.com/openSUSE/get-o-o/pull/207 -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1229913] New: AUDIT-1: kio-admin: revisit kio-admin privileged file operations via D-Bus
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1229913 Bug ID: 1229913 Summary: AUDIT-1: kio-admin: revisit kio-admin privileged file operations via D-Bus Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team(a)suse.de Reporter: matthias.gerstner(a)suse.com QA Contact: qa-bugs(a)suse.de CC: popov895(a)ukr.net Target Milestone: --- Found By: --- Blocker: --- +++ This bug was initially created as a clone of Bug #1205607 We've been asked to have a fresh look ad kio-admin, formerly rejected in bug 1205607. AFAIK upstream activities to come up with a robust API have been abandoned, but we can still have another look at the current production code. -- You are receiving this mail because: You are on the CC list for the bug.

1 7

[Bug 1234721] New: Option "openSUSE Leap 15.6" for field "OS:" is not available
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1234721 Bug ID: 1234721 Summary: Option "openSUSE Leap 15.6" for field "OS:" is not available Classification: openSUSE Product: openSUSE Distribution Version: Leap 15.6 Hardware: x86-64 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Other Assignee: screening-team-bugs(a)suse.de Reporter: kaykaykay123(a)gmail.com QA Contact: qa-bugs(a)suse.de Target Milestone: --- Found By: --- Blocker: --- When creating bug report option "openSUSE Leap 15.6" for field "OS:" is not available, "openSUSE Leap 15.5" is the last available for Leap. Option "openSUSE Leap 16.0" is also not available. -- You are receiving this mail because: You are on the CC list for the bug.

1 0

[Bug 1227477] Add Mesa-demo package to media (was: eglinfo tool is required but could not be found)
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

1 0

[Bug 1227477] Add Mesa-demo package to media (was: eglinfo tool is required but could not be found)
by bugzilla_noreply＠suse.com 19 Dec '24

19 Dec '24

https://bugzilla.suse.com/show_bug.cgi?id=1227477 Antonio Gemelli <antonio.gemelli(a)suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- Flags| |needinfo? -- You are receiving this mail because: You are on the CC list for the bug.

1 0