Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-11240

Set a default SELinux label on /run/user/$PID

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done-Errata
    • Icon: Undefined Undefined
    • rhel-9.4
    • rhel-9.3.0
    • librepo
    • None
    • librepo-1.14.5-2.el9
    • Major
    • sst_cs_software_management
    • ssg_core_services
    • 14
    • 16
    • None
    • QE ack
    • False
    • Hide

      None

      Show
      None
    • Yes
    • Bug Fix
    • Hide
      .`systemd` now correctly manages the `/run/user/0` directory created by `librepo`

      Previously, if the `librepo` functions were called from an Insights client before logging in root, the `/run/user/0` directory could be created with a wrong SELinux context type. This prevented `systemd` from cleaning the directory after you logged out from root.

      With this update, the `librepo` package now sets a default creation type according to default file system labeling rules defined in a SELinux policy. As a result, `systemd` now correctly manages the `/run/user/0` directory created by `librepo`.
      Show
      .`systemd` now correctly manages the `/run/user/0` directory created by `librepo` Previously, if the `librepo` functions were called from an Insights client before logging in root, the `/run/user/0` directory could be created with a wrong SELinux context type. This prevented `systemd` from cleaning the directory after you logged out from root. With this update, the `librepo` package now sets a default creation type according to default file system labeling rules defined in a SELinux policy. As a result, `systemd` now correctly manages the `/run/user/0` directory created by `librepo`.
    • Done
    • None

      librepo implements the same workaround for placing gpg-agent socket file under /run/user/$PID path as libdnf. Because we want libdnf to prefer a default SELinux label on the directory (RHEL-11238) we need librepo to do the same.

      Affected package: librepo-1.14.5-1.el9.x86_64.

            rhn-support-ppisar Petr Pisar
            rhn-support-ppisar Petr Pisar
            packaging-team-maint packaging-team-maint
            Jan Blazek Jan Blazek
            Mariya Pershina Mariya Pershina
            Votes:
            0 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: