https://bugzilla.suse.com/show_bug.cgi?id=1190141 https://bugzilla.suse.com/show_bug.cgi?id=1190141#c27 --- Comment #27 from Martin Sirringhaus <martin.sirringhaus@suse.com> --- (In reply to Jiri Slaby from comment #25)

This was reported against tumbleweed and AFAICS TW already has: + policy->AddPath(rdonly, "/dev/random"); + policy->AddPath(rdonly, "/proc/sys/crypto/fips_enabled"); (and not "files->Add("/proc/sys/crypto/fips_enabled")").

So it occurs to me the SLE requests are not fixing the original bug?

There are multiple sandboxes. We (SLE and TW) already had these lines for the other sandboxes, but a new sandbox for socket processes was introduced by upstream. So we had to add it to that new sandbox as well. -- You are receiving this mail because: You are on the CC list for the bug.