Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-10720

Set a default SELinux label on /run/user/$PID

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • rhel-8.10
    • rhel-8.8.0
    • librepo
    • None
    • librepo-1.14.2-5.el8
    • None
    • Important
    • rhel-sst-cs-software-management
    • ssg_core_services
    • 14
    • 16
    • None
    • QE ack
    • False
    • Hide

      None

      Show
      None
    • Yes
    • None
    • Bug Fix
    • Hide
      .`systemd` now correctly manages the `/run/user/0` directory created by `librepo`

      Previously, if the `librepo` functions were called from an Insights client before logging in root, the `/run/user/0` directory could be created with a wrong SELinux context type. This prevented `systemd` from cleaning the directory after you logged out from root.

      With this update, the `librepo` package now sets a default creation type according to default file system labeling rules defined in a SELinux policy. As a result, `systemd` now correctly manages the `/run/user/0` directory created by `librepo`.
      Show
      .`systemd` now correctly manages the `/run/user/0` directory created by `librepo` Previously, if the `librepo` functions were called from an Insights client before logging in root, the `/run/user/0` directory could be created with a wrong SELinux context type. This prevented `systemd` from cleaning the directory after you logged out from root. With this update, the `librepo` package now sets a default creation type according to default file system labeling rules defined in a SELinux policy. As a result, `systemd` now correctly manages the `/run/user/0` directory created by `librepo`.
    • Done
    • None

      librepo implements the same workaround for placing gpg-agent socket file under  /run/user/$PID path as libdnf. Because we want libdnf to prefer a default SELinux label on the directory (RHEL-6421) we need librepo to do the same.

              rhn-support-ppisar Petr Pisar
              rhn-support-ppisar Petr Pisar
              packaging-team-maint packaging-team-maint
              Jan Blazek Jan Blazek
              Mariya Pershina Mariya Pershina
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: