[Bug 1197610] New: [Build 20220326] accountsservice fails to start on SELinux enabled system
http://bugzilla.opensuse.org/show_bug.cgi?id=1197610 Bug ID: 1197610 Summary: [Build 20220326] accountsservice fails to start on SELinux enabled system Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other URL: https://openqa.opensuse.org/tests/2267704/modules/firs t_boot/steps/18 OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: GNOME Assignee: gnome-bugs@suse.de Reporter: dimstar@opensuse.org QA Contact: qa-bugs@suse.de Found By: openQA Blocker: Yes ## Observation openQA test in scenario opensuse-Tumbleweed-NET-x86_64-gnome+selinux@uefi fails in [first_boot](https://openqa.opensuse.org/tests/2267704/modules/first_boot/steps/18) After upgrading accountsservice to 22.04.62, a system being installed with SELinux enabled fails to start up completely. The service fails to start with:
Mar 27 10:49:57.926295 localhost.localdomain systemd[844]: Failed to mount /run/systemd/unit-root/proc/844/loginuid to /run/systemd/unit-root/proc/844/loginuid: Permission denied Mar 27 10:49:57.927053 localhost.localdomain systemd[844]: accounts-daemon.service: Failed to set up mount namespacing: /run/systemd/unit-root/proc/844/loginuid: Permission denied Mar 27 10:49:57.930686 localhost.localdomain systemd[844]: accounts-daemon.service: Failed at step NAMESPACE spawning /usr/libexec/accounts-daemon: Permission denied Mar 27 10:49:57.934639 localhost.localdomain systemd[1]: accounts-daemon.service: Main process exited, code=exited, status=226/NAMESPACE Mar 27 10:49:57.934780 localhost.localdomain systemd[1]: accounts-daemon.service: Failed with result 'exit-code'. Mar 27 10:49:57.935014 localhost.localdomain systemd[1]: Failed to start Accounts Service.
## Test suite description install gnome with SELinux enabled ## Reproducible Fails since (at least) Build [20220325](https://openqa.opensuse.org/tests/2266082) ## Expected result Last good: [20220324](https://openqa.opensuse.org/tests/2264289) (or more recent) ## Further details Always latest result in this scenario: [latest](https://openqa.opensuse.org/tests/latest?arch=x86_64&distri=opensuse&flavor=NET&machine=uefi&test=gnome%2Bselinux&version=Tumbleweed) -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197610 http://bugzilla.opensuse.org/show_bug.cgi?id=1197610#c1 Yifan Jiang <yfjiang@suse.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gnome-bugs@suse.de, | |yfjiang@suse.com Assignee|gnome-bugs@suse.de |yu.daike@suse.com --- Comment #1 from Yifan Jiang <yfjiang@suse.com> --- Hello Daike, I know you had research in security regard, can you please help on an initial analysis, thanks. -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197610 http://bugzilla.opensuse.org/show_bug.cgi?id=1197610#c9 --- Comment #9 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to Johannes Segitz from comment #8)
Fix is in security:SElinux and submitted for Factory
Thanks! Once this is in I'll resubmit accountsservice update -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1197610 http://bugzilla.opensuse.org/show_bug.cgi?id=1197610#c10 --- Comment #10 from Dominique Leuenberger <dimstar@opensuse.org> --- (In reply to Dominique Leuenberger from comment #9)
(In reply to Johannes Segitz from comment #8)
Fix is in security:SElinux and submitted for Factory
Thanks! Once this is in I'll resubmit accountsservice update
984690 State:review By:factory-auto When:2022-06-23T09:31:07 submit: GNOME:Factory/accountsservice@e208e1e233e2d715eb3caddab61a362a -> openSUSE:Factory Let's see if that works this time -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@suse.com