search

fedora-selinux / selinux-policy

selinux-policy for Fedora is a large patch off the mainline
GNU General Public License v2.0
156 stars 157 forks source link

Allow fstab generator dac_read_search capability #2136

Closed zpytela closed 1 month ago

zpytela commented 1 month ago

The dac_override capability has already been allowed, so it makes sense to allow dac_read_search, too, as the latter one is actually the first one checked by kernel.

packit-as-a-service[bot] commented 1 month ago

Cockpit tests failed for commit 830b0d203f980793391878448458f18c68849e8f. @martinpitt, @jelly, @mvollmer please check.

packit-as-a-service[bot] commented 1 month ago

Cockpit tests failed for commit e1e3db287ea875fd2a7953aa50147b4f63afe450. @martinpitt, @jelly, @mvollmer please check.

martinpitt commented 1 month ago

The Cockpit tests started to fail due to a tricky udisks2 regression in rawhide. We are investigating in https://github.com/cockpit-project/cockpit/issues/20520 ASAP. In the meantime, please ignore the TestStorageAnaconda failures. Sorry for the noise!

martinpitt commented 1 month ago

What an odyssey -- we finally found the root cause and worked around it. @zpytela I restarted the failing tests in the recent PRs.

martinpitt commented 1 month ago

ah dang -- needs #2138 first, as I also reorganized the test plans. After that lands, I'll re-run all the failed PRs.

zpytela commented 1 month ago

Addressed by https://github.com/fedora-selinux/selinux-policy/pull/2136