Re: Many 'map' SELinux denials in current Rawhide

2017-08-18 Thread Daniel Walsh
On 08/15/2017 02:50 PM, Joonas Sarajärvi wrote: Adam Williamson kirjoitti 15.08.2017 klo 02:37: Of course, for day-to-day Rawhide users, booting with 'enforcing=0' can work around these issues for now (or you could, I suppose, create a local policy that just blanket allowed the 'map' permission

Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Adam Williamson
On Tue, 2017-08-15 at 21:50 +0300, Joonas Sarajärvi wrote: > Adam Williamson kirjoitti 15.08.2017 klo 02:37: > > Of course, for day-to-day Rawhide users, booting with 'enforcing=0' can > > work around these issues for now (or you could, I suppose, create a > > local policy that just blanket

Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Joonas Sarajärvi
Adam Williamson kirjoitti 15.08.2017 klo 02:37: Of course, for day-to-day Rawhide users, booting with 'enforcing=0' can work around these issues for now (or you could, I suppose, create a local policy that just blanket allowed the 'map' permission in all cases, so all other SELinux restrictions

Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Lukas Vrabec
On 08/15/2017 05:25 PM, Adam Williamson wrote: On Tue, 2017-08-15 at 16:58 +0200, Lukas Vrabec wrote: On 08/15/2017 01:37 AM, Adam Williamson wrote: Hi folks! Just wanted to give a heads-up on this: it seems that a recent selinux- policy update, 3.13.1-269 , introduced a new permission called

Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Adam Williamson
On Tue, 2017-08-15 at 16:58 +0200, Lukas Vrabec wrote: > On 08/15/2017 01:37 AM, Adam Williamson wrote: > > Hi folks! > > > > Just wanted to give a heads-up on this: it seems that a recent selinux- > > policy update, 3.13.1-269 , introduced a new permission called 'map'. > > This seems to have

Re: Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Lukas Vrabec
On 08/15/2017 04:58 PM, Lukas Vrabec wrote: On 08/15/2017 01:37 AM, Adam Williamson wrote: Hi folks! Just wanted to give a heads-up on this: it seems that a recent selinux- policy update, 3.13.1-269 , introduced a new permission called 'map'. This seems to have resulted in rather a large

Re: Many 'map' SELinux denials in current Rawhide

2017-08-15 Thread Lukas Vrabec
On 08/15/2017 01:37 AM, Adam Williamson wrote: Hi folks! Just wanted to give a heads-up on this: it seems that a recent selinux- policy update, 3.13.1-269 , introduced a new permission called 'map'. This seems to have resulted in rather a large amount of new SELinux denials for this permission