Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to systemd 246 #1015

Closed
tjkirch opened this issue Aug 7, 2020 · 2 comments · Fixed by #1176
Closed

Update to systemd 246 #1015

tjkirch opened this issue Aug 7, 2020 · 2 comments · Fixed by #1176
Assignees

Comments

@tjkirch
Copy link
Contributor

tjkirch commented Aug 7, 2020

https://github.com/systemd/systemd/blob/master/NEWS

I tried updating from systemd 245 to 246, but the wicked nanny service fails to start about half of the time, maybe more - maybe a timing issue. So far all I have is the console message saying "Failed to start wicked network nanny service", which prevents most networking from starting up.

@bcressey
Copy link
Contributor

bcressey commented Sep 18, 2020

We're hitting SELinux denials because of two changes in v246.

systemd/systemd@4f07ddf causes this kernel denial:

avc:  denied  { write } for
  pid=1 comm="systemd"
  path="pipe:[12129]" dev="pipefs" ino=12129
  scontext=system_u:system_r:init_t:s0
  tcontext=system_u:system_r:api_t:s0
  tclass=fifo_file permissive=0

systemd/systemd@77ee178 causes this userspace denial:

Sep 18 21:35:11 localhost systemd[1]: Starting D-Bus System Message Bus...
Sep 18 21:35:11 localhost systemd[286]: selinux: avc:  netlink recvfrom: error 9

(PID 286 is dbus-broker-launcher.)

@bcressey bcressey self-assigned this Oct 21, 2020
@bcressey
Copy link
Contributor

The userspace denial seems harmless. The EBADFD or bad file descriptor error happens only when starting dbus-broker,
apparently because systemd is trying to access the dbus socket before the server is ready.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants