Not sure if SELinux policy needs to learn about the merge as well.
Currently, `sudo semanage fcontext -l | rg bin.*=` shows:
```
/sbin = /usr/sbin
/bin = /usr/bin
```
And there are executables in both /usr/bin and /usr/sbin with specific
labels, e.g. `sudo semanage fcontext -l | rg bin/.*virt`
Hello and apologies for resurrecting an old thread.
I was looking for information regarding IMA in F37 and found it was asked
but I could not see any replies.
My question is exactly the same as the OP, I do not see security.ima
attributes on files after upgrading to F37.
(Secure Boot is concerned only with verifying the trustworthiness of the
bootloader.
>From https://man7.org/linux/man-pages/man7/kernel_lockdown.7.html:
The Kernel Lockdown feature is designed to prevent both direct
and indirect access to a running kernel image, attempting to
protect against
@lists.fedoraproject.org/message/R47O6SQYZB4GZADD5QICJMO656BPSDPL/
(I saw a previous PR with a similar problem)
Best regards.
On Mon, Jan 17, 2022 at 4:56 PM Aaron Conole wrote:
> David Sastre writes:
>
> > In accordance with the Fedora non-responsive maintainer policy, I am
In accordance with the Fedora non-responsive maintainer policy, I am
attempting to contact Aaron Conole (aconole).
Does anyone know how to contact this package maintainer? Direct email and
bug reports have had no response.
This is in reference to these open bugs with lldpd:
;,
"",
":: [ 21:45:01 ] :: [ LOG] :: JOURNAL XML:
/var/tmp/beakerlib-vWlJfli/journal.xml",
":: [ 21:45:01 ] :: [ LOG] :: JOURNAL TXT:
/var/tmp/beakerlib-vWlJfli/journal.txt",
"::
Hello,
First off, I'm not in the packagers group myself as of yet, but I've been
working on a PR[1] to update lldpd to a current version.
Long story short, Koji is building successfully[2], but dist-git is
reporting failure on one of the tests[3].
I made sure I can pass the tests locally on a
This is an interesting proposal and discussion.
I assume that the people who worked on it looked into various different
possibilities for its implementation and decide on the current one, but I
have a few questions:
- Since there are people concerned about the increased size of the
binary,
On Tue, May 26, 2020 at 10:43 PM Przemek Klosowski via devel <
devel@lists.fedoraproject.org> wrote:
> On 5/23/20 12:18 AM, Nico Kadel-Garcia wrote:
> > Would the time be better spent enhancing SELinux?
>
> ThatSELinux already labels everything in /bin and /usr/libexec as
>
>
