--17219780410.7a9F8D18.2368
Date: Fri, 26 Jul 2024 07:14:01 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228348

            Bug ID: 1228348
           Summary: Jerky playing on mpv since upgrading to Leap 15.6
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: aloisio-at-gmx.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Since upgrading to Leap 15.6, I have been experiencing jerky playing with m=
pv,
with desync on occasion.

Upstream won't support a non current build of mpv (see
https://github.com/mpv-player/mpv/issues/14595), but the latest snapshot th=
at
still works with ffmpeg 4.x seems to fix the problem.

Any other consideration before submitting a maintenance request
(https://build.opensuse.org/package/show/home:alois:branches:OBS_Maintained=
:mpv/mpv.openSUSE_Backports_SLE-15-SP6_Update)
?
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17219780410.7a9F8D18.2368
Date: Fri, 26 Jul 2024 07:14:01 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228348

          Summary
          Jerky playing on mpv since upgrading to Leap 15.6

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          screening-team-bugs@suse.de

          Reporter
          aloisio@gmx.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Since upgrading to Leap 15.6, I have been experiencing jerky=
 playing with mpv,
with desync on occasion.

Upstream won't support a non current build of mpv (see
https://github.c=
om/mpv-player/mpv/issues/14595), but the latest snapshot that
still works with ffmpeg 4.x seems to fix the problem.

Any other consideration before submitting a maintenance request
(https://build.ope=
nsuse.org/package/show/home:alois:branches:OBS_Maintained:mpv/mpv.openSUSE_=
Backports_SLE-15-SP6_Update)
?

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17219780410.7a9F8D18.2368--


--17220739781.bCEEbDA4.164
Date: Sat, 27 Jul 2024 09:52:58 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228372

            Bug ID: 1228372
           Summary: selinux denied  named  access to /var/lib/named/log/dnsquery.log
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: conde.philippe-at-skynet.be
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I have enabled SELinux in permissive mode and I receive an alert about
isc-net-000x.

This is related to named logging dns queries.
Named is running in a jail (chroot)

in journalctl I have

Jul 21 08:17:50 hpprol2 setroubleshoot[197668]: SELinux is preventing
isc-net-0000 from getattr access on the file /var/lib/named/log/dnsquery.lo=
g.
For complete SELinux messages run: sealert -l
cfcc5252-aabf-4b70-ac82-88311000965e
Jul 21 08:17:50 hpprol2 setroubleshoot[197668]: SELinux is preventing
isc-net-0000 from getattr access on the file /var/lib/named/log/dnsquery.lo=
g.

    *****  Plugin catchall_labels (83.8 confidence) suggests=20=20
*******************

            If you want to allow isc-net-0000 to have getattr access on the
dnsquery.log file
            Then you need to change the label on
/var/lib/named/log/dnsquery.log
            Do
            # semanage fcontext -a -t FILE_TYPE
'/var/lib/named/log/dnsquery.log'
             where FILE_TYPE is one of the following: NetworkManager_log_t,
NetworkManager_tmp_t, abrt_helper_exec_t, abrt_tmp_t, abrt_upload_watch_tmp=
_t,
abrt_var_cache_t, abrt_var_log_t, abrt_var_run_t, acct_data_t,
admin_crontab_tm>
           Then execute:
           restorecon -v '/var/lib/named/log/dnsquery.log'

    *****  Plugin catchall (17.1 confidence) suggests=20=20
**************************

           If you believe that isc-net-0000 should be allowed getattr acces=
s on
the dnsquery.log file by default.
           Then you should report this as a bug.
           You can generate a local policy module to allow this access.
           Do
           allow this access for now by executing:
           # ausearch -c 'isc-net-0000' --raw | audit2allow -M my-iscnet0000
           # semodule -X 300 -i my-iscnet0000.pp

and  using ausearch I havr
hpprol2:/var/log/audit # ausearch -c 'isc-net-0000' --raw=20
type=3DAVC msg=3Daudit(1721495763.334:1954): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0000" path=3D"/var/lib/named/log/dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721495763.334:1955): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0000" path=3D"/var/lib/named/log/dnsquery.log" d=
ev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721496290.999:1960): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0004" path=3D"/var/lib/named/log/dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721496290.999:1961): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0004" path=3D"/var/lib/named/log/dnsquery.log" d=
ev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498401.530:1966): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0002" path=3D"/var/lib/named/log/dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498401.530:1967): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0002" path=3D"/var/lib/named/log/dnsquery.log" d=
ev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498910.678:1975): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0001" path=3D"/var/lib/named/log/dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498910.678:1976): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0001" path=3D"/var/lib/named/log/dnsquery.log" d=
ev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1

 I  found this workaround

hpprol2: # semanage fcontext -a -t named_log_t "/var/lib/named/log(/.*)?"=20
hpprol2:/var/log/audit # ls -dZ /var/lib/named/log=20
system_u:object_r:var_lib_t:s0 /var/lib/named/log=20
hpprol2: # restorecon -R -v /var/lib/named/log=20
Relabeled /var/lib/named/log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/rpz.log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.1 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.0 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/xfer.log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log from system_u:object_r:var_lib_t:=
s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.2 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20

I think that a context is missing in this case=20

see also
https://forums.opensuse.org/t/selinux-named-and-dnsquery-log/177212

Regards
Philippe
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17220739781.bCEEbDA4.164
Date: Sat, 27 Jul 2024 09:52:58 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228372

          Summary
          selinux denied  named  access to /var/lib/named/log/dnsquery.=
log

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          conde.philippe@skynet.be

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I have enabled SELinux in permissive mode and I receive an a=
lert about
isc-net-000x.

This is related to named logging dns queries.
Named is running in a jail (chroot)

in journalctl I have

Jul 21 08:17:50 hpprol2 setroubleshoot[197668]: SELinux is preventing
isc-net-0000 from getattr access on the file /var/lib/named/log/dnsquery.lo=
g.
For complete SELinux messages run: sealert -l
cfcc5252-aabf-4b70-ac82-88311000965e
Jul 21 08:17:50 hpprol2 setroubleshoot[197668]: SELinux is preventing
isc-net-0000 from getattr access on the file /var/lib/named/log/dnsquery.lo=
g.

    *****  Plugin catchall_labels (83.8 confidence) suggests=20=20
*******************

            If you want to allow isc-net-0000 to have getattr access on the
dnsquery.log file
            Then you need to change the label on
/var/lib/named/log/dnsquery.log
            Do
            # semanage fcontext -a -t FILE_TYPE
'/var/lib/named/log/dnsquery.log'
             where FILE_TYPE is one of the following: NetworkManager_log_t,
NetworkManager_tmp_t, abrt_helper_exec_t, abrt_tmp_t, abrt_upload_watch_tmp=
_t,
abrt_var_cache_t, abrt_var_log_t, abrt_var_run_t, acct_data_t,
admin_crontab_tm>
           Then execute:
           restorecon -v '/var/lib/named/log/dnsquery.log'

    *****  Plugin catchall (17.1 confidence) suggests=20=20
**************************

           If you believe that isc-net-0000 should be allowed getattr acces=
s on
the dnsquery.log file by default.
           Then you should report this as a bug.
           You can generate a local policy module to allow this access.
           Do
           allow this access for now by executing:
           # ausearch -c 'isc-net-0000' --raw | audit2allow -M my-iscnet0000
           # semodule -X 300 -i my-iscnet0000.pp

and  using ausearch I havr
hpprol2:/var/log/audit # ausearch -c 'isc-net-0000' --raw=20
type=3DAVC msg=3Daudit(1721495763.334:1954): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0000" path=3D"/var/lib/named/log/dnsquery.lo=
g" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721495763.334:1955): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0000" path=3D"/var/lib/named/log/=
dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721496290.999:1960): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0004" path=3D"/var/lib/named/log/dnsquery.lo=
g" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721496290.999:1961): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0004" path=3D"/var/lib/named/log/=
dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498401.530:1966): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0002" path=3D"/var/lib/named/log/dnsquery.lo=
g" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498401.530:1967): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0002" path=3D"/var/lib/named/log/=
dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498910.678:1975): avc:  denied  { append } for  =
pid=3D2121
comm=3D"isc-net-0001" path=3D"/var/lib/named/log/dnsquery.lo=
g" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1
type=3DAVC msg=3Daudit(1721498910.678:1976): avc:  denied  { getattr } for=
=20
pid=3D2121 comm=3D"isc-net-0001" path=3D"/var/lib/named/log/=
dnsquery.log" dev=3D"sdb2"
ino=3D4719263 scontext=3Dsystem_u:system_r:named_t:s0
tcontext=3Dsystem_u:object_r:var_lib_t:s0 tclass=3Dfile permissive=3D1

 I  found this workaround

hpprol2: # semanage fcontext -a -t named_log_t "/var/lib/named/log(/.*=
)?"=20
hpprol2:/var/log/audit # ls -dZ /var/lib/named/log=20
system_u:object_r:var_lib_t:s0 /var/lib/named/log=20
hpprol2: # restorecon -R -v /var/lib/named/log=20
Relabeled /var/lib/named/log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/rpz.log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.1 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.0 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/xfer.log from system_u:object_r:var_lib_t:s0 to
system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log from system_u:object_r:var_lib_t:=
s0
to system_u:object_r:named_log_t:s0=20
Relabeled /var/lib/named/log/dnsquery.log.2 from system_u:object_r:var_lib_=
t:s0
to system_u:object_r:named_log_t:s0=20

I think that a context is missing in this case=20

see also
https://forums.opensuse.org/t/selinux-named-and-dnsquery-log/177212

Regards
Philippe

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17220739781.bCEEbDA4.164--


--17220748252.Dff35C9Df.167
Date: Sat, 27 Jul 2024 10:07:05 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228373

            Bug ID: 1228373
           Summary: supermin regression in Tumbleweed / Factory causes virt-inspector to fail
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: claudio.fontana-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

I was surprised by a supermin regression on Factory.

export LIBGUESTFS_DEBUG=3D1
export LIBGUESTFS_TRACE=3D1

virt-inspector --verbose --no-applications --no-icon
/153-RAID0/datastore2/centos9/centos9.vmdk

libguestfs: run supermin
libguestfs: command: run: /usr/bin/supermin
libguestfs: command: run: \ --build
libguestfs: command: run: \ --verbose
libguestfs: command: run: \ --if-newer
libguestfs: command: run: \ --lock /var/tmp/.guestfs-0/lock
libguestfs: command: run: \ --copy-kernel
libguestfs: command: run: \ -f ext2
libguestfs: command: run: \ --host-cpu x86_64
libguestfs: command: run: \ /usr/lib64/guestfs/supermin.d
libguestfs: command: run: \ -o /var/tmp/.guestfs-0/appliance.d
supermin: version: 5.3.4
supermin: rpm: detected RPM version 4.19
supermin: rpm: detected RPM architecture x86_64
supermin: rpm: detected zypper version 1.14.76
supermin: package handler: opensuse/rpm
supermin: acquiring lock on /var/tmp/.guestfs-0/lock
supermin: rpm: cannot locate RPM database; if this is a normal RPM-based Li=
nux
distro then this is probably a supermin bug
libguestfs: error: /usr/bin/supermin exited with error status 1, see debug
messages above
libguestfs: trace: launch =3D -1 (error)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17220748252.Dff35C9Df.167
Date: Sat, 27 Jul 2024 10:07:05 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228373

          Summary
          supermin regression in Tumbleweed / Factory causes virt-inspe=
ctor to fail

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Tools

          Assignee
          virt-bugs@suse.de

          Reporter
          claudio.fontana@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

I was surprised by a supermin regression on Factory.

export LIBGUESTFS_DEBUG=3D1
export LIBGUESTFS_TRACE=3D1

virt-inspector --verbose --no-applications --no-icon
/153-RAID0/datastore2/centos9/centos9.vmdk

libguestfs: run supermin
libguestfs: command: run: /usr/bin/supermin
libguestfs: command: run: \ --build
libguestfs: command: run: \ --verbose
libguestfs: command: run: \ --if-newer
libguestfs: command: run: \ --lock /var/tmp/.guestfs-0/lock
libguestfs: command: run: \ --copy-kernel
libguestfs: command: run: \ -f ext2
libguestfs: command: run: \ --host-cpu x86_64
libguestfs: command: run: \ /usr/lib64/guestfs/supermin.d
libguestfs: command: run: \ -o /var/tmp/.guestfs-0/appliance.d
supermin: version: 5.3.4
supermin: rpm: detected RPM version 4.19
supermin: rpm: detected RPM architecture x86_64
supermin: rpm: detected zypper version 1.14.76
supermin: package handler: opensuse/rpm
supermin: acquiring lock on /var/tmp/.guestfs-0/lock
supermin: rpm: cannot locate RPM database; if this is a normal RPM-based Li=
nux
distro then this is probably a supermin bug
libguestfs: error: /usr/bin/supermin exited with error status 1, see debug
messages above
libguestfs: trace: launch =3D -1 (error)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17220748252.Dff35C9Df.167--


--17221742140.20210.116
Date: Sun, 28 Jul 2024 13:43:34 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228384

            Bug ID: 1228384
           Summary: virt-install generates unwanted libvirt storage pools when running with --dry-run --print-xml
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Virtualization:Tools
          Assignee: virt-bugs-at-suse.de
          Reporter: claudio.fontana-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

For virtx/vmx2xml we need to run virt-install _just_ to generate the xml. A=
ll
other features of virt-install are useless for this use case.

Therefore we run virt-install with --print-xml --dry-run

Still virt-install insists in creating a storage pool for the disks referen=
ced
in the domain xml. It should not, as it makes no sense under those command =
line
options.

This slows down the rest of the stack (cockpit...) as 100s of unused storage
pools are loaded.

The workarounds create their own problems. This needs to be addressed upstr=
eam.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17221742140.20210.116
Date: Sun, 28 Jul 2024 13:43:34 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228384

          Summary
          virt-install generates unwanted libvirt storage pools when ru=
nning with --dry-run --print-xml

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Virtualization:Tools

          Assignee
          virt-bugs@suse.de

          Reporter
          claudio.fontana@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

For virtx/vmx2xml we need to run virt-install _just_ to gene=
rate the xml. All
other features of virt-install are useless for this use case.

Therefore we run virt-install with --print-xml --dry-run

Still virt-install insists in creating a storage pool for the disks referen=
ced
in the domain xml. It should not, as it makes no sense under those command =
line
options.

This slows down the rest of the stack (cockpit...) as 100s of unused storage
pools are loaded.

The workarounds create their own problems. This needs to be addressed upstr=
eam.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17221742140.20210.116--


--17221985372.Bd5Ce.211
Date: Sun, 28 Jul 2024 20:28:57 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228385

            Bug ID: 1228385
           Summary: [SELinux] denial ppp interface  during boot
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: conde.philippe-at-skynet.be
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876304
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876304&action=3Dedit
Network setting (ip a + ip r s)

I have a server with latest openSUSE tumbleweed with KDE.
The kernel is the xen kernel.

During boot the network is started via systemd-networkd :  3 network devices
eno1, eno2, eno3=20
When the network is up, the boot starts a ppp@.service which generate a
additional device ppp0 and set a new route via ppp0

see output "ip a" and "ip_r s"  ( I have sanitized the external ip address)

This setting is working sicne 2 years now.

I have enabled SELinux following your document
https://en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

SELinux is in permissive mode.
During the boot I see in journalctl and in audit.log a lot of AVC and denied
for ppp.

I'll attach=20
1. the related journalctl log and sealert output for some errors.=20
2. output of ausearch -ts today -m avc related to ppp.=20
There are some other errors related to xen that I have removed
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17221985372.Bd5Ce.211
Date: Sun, 28 Jul 2024 20:28:57 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228385

          Summary
          [SELinux] denial ppp interface  during boot

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          conde.philippe@skynet.be

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attach=
ment 876304 [details]
Network setting (ip a + ip r s)

I have a server with latest openSUSE tumbleweed with KDE.
The kernel is the xen kernel.

During boot the network is started via systemd-networkd :  3 network devices
eno1, eno2, eno3=20
When the network is up, the boot starts a ppp@.service which generate a
additional device ppp0 and set a new route via ppp0

see output "ip a" and "ip_r s"  ( I have sanitized the =
external ip address)

This setting is working sicne 2 years now.

I have enabled SELinux following your document
https:/=
/en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

SELinux is in permissive mode.
During the boot I see in journalctl and in audit.log a lot of AVC and denied
for ppp.

I'll attach=20
1. the related journalctl log and sealert output for some errors.=20
2. output of ausearch -ts today -m avc related to ppp.=20
There are some other errors related to xen that I have removed

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17221985372.Bd5Ce.211--


--17222293093.Ea463.406
Date: Mon, 29 Jul 2024 05:01:49 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228387

            Bug ID: 1228387
           Summary: [Build 20240728] openQA test fails in welcome: qxl graphics garbage
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4363532/modules/welc
                    ome/steps/7
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

This is relared to kernel 6.10
All tests that run on qxl graphics are giving render issues

e.g
*
https://openqa.opensuse.org/tests/4363537#step/logs_from_installation_syste=
m/26
* https://openqa.opensuse.org/tests/4363532#step/welcome/7

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-gnome_dual_windows10@uefi_win fails in
[welcome](https://openqa.opensuse.org/tests/4363532/modules/welcome/steps/7)

## Test suite description
Maintainer: grace.wang-at-suse.com

## Reproducible

Fails since (at least) Build
[20240728](https://openqa.opensuse.org/tests/4362928)

## Expected result

Last good: [20240726](https://openqa.opensuse.org/tests/4361550) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3Duefi_win&test=3Dgnome_dual_windows10&version=
=3DTumbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17222293093.Ea463.406
Date: Mon, 29 Jul 2024 05:01:49 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228387

          Summary
          [Build 20240728] openQA test fails in welcome: qxl graphics g=
arbage

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4363532/modules/welcome/ste=
ps/7

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

This is relared to kernel 6.10
All tests that run on qxl graphics are giving render issues

e.g
*
https://openqa.opensuse.org/tests/4363537#step/logs_from_i=
nstallation_system/26
* http=
s://openqa.opensuse.org/tests/4363532#step/welcome/7

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-gnome_dual_windows10@uefi_win fails in
[welcome](https://openqa.opensuse.org/tests/4363532/modules/welcome/step=
s/7)

## Test suite description
Maintainer: grace.wang@suse.=
com

## Reproducible

Fails since (at least) Build
[20240728](https://op=
enqa.opensuse.org/tests/4362928)

## Expected result

Last good: [20240726](https://openqa.opensuse.org/tests/4361550) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/te=
sts/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=
=3Duefi_win&test=3Dgnome_dual_windows10&version=3DTumbleweed)</=
pre>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222293093.Ea463.406--


--17222327581.680287A.448
Date: Mon, 29 Jul 2024 05:59:18 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228388

            Bug ID: 1228388
           Summary: [Build 20240728] openQA test fails in kdump_and_crash
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
               URL: https://openqa.opensuse.org/tests/4363507/modules/kdum
                    p_and_crash/steps/68
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: dimstar-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: openQA
           Blocker: Yes

## Observation

Started showing up with the update to kernel 6.10

WARNING: could not find MAGIC_START!
WARNING: cannot read linux_banner string
crash: /var/tmp/vmlinux.xz_RPmoMy and /var/crash/2024-07-29-01-22/vmcore do=
 not
match!

Usage:

  crash [OPTION]... NAMELIST MEMORY-IMAGE[@ADDRESS]     (dumpfile form)
  crash [OPTION]... [NAMELIST]                          (live system form)

Enter "crash -h" for details.

Not sure if the kernel is to blame or 'crash' needs to catch up

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_textmode@64bit fails in
[kdump_and_crash](https://openqa.opensuse.org/tests/4363507/modules/kdump_a=
nd_crash/steps/68)

## Test suite description
Maintainer: slindomansilla-at-suse.de.
Mainly post-installation console extra tests.

## Reproducible

Fails since (at least) Build
[20240612](https://openqa.opensuse.org/tests/4268274)

## Expected result

Last good: [20240611](https://openqa.opensuse.org/tests/4267371) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests/latest?arch=3Dx86_64&distri=3Dop=
ensuse&flavor=3DDVD&machine=3D64bit&test=3Dextra_tests_textmode&version=3DT=
umbleweed)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17222327581.680287A.448
Date: Mon, 29 Jul 2024 05:59:18 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228388

          Summary
          [Build 20240728] openQA test fails in kdump_and_crash

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          URL
          https://openqa.opensuse.org/tests/4363507/modules/kdump_and_c=
rash/steps/68

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          dimstar@opensuse.org

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          openQA

          Blocker
          Yes

## Observation

Started showing up with the update to kernel 6.10

WARNING: could not find MAGIC_START!
WARNING: cannot read linux_banner string
crash: /var/tmp/vmlinux.xz_RPmoMy and /var/crash/2024-07-29-01-22/vmcore do=
 not
match!

Usage:

  crash [OPTION]... NAMELIST MEMORY-IMAGE[@ADDRESS]     (dumpfile form)
  crash [OPTION]... [NAMELIST]                          (live system form)

Enter "crash -h" for details.

Not sure if the kernel is to blame or 'crash' needs to catch up

openQA test in scenario
opensuse-Tumbleweed-DVD-x86_64-extra_tests_textmode@64bit fails in
[kdump_and_crash](https://openqa.opensuse.org/tests/4363507/mod=
ules/kdump_and_crash/steps/68)

## Test suite description
Maintainer: slindomansilla&#6=
4;suse.de.
Mainly post-installation console extra tests.

## Reproducible

Fails since (at least) Build
[20240612](https://op=
enqa.opensuse.org/tests/4268274)

## Expected result

Last good: [20240611](https://openqa.opensuse.org/tests/4267371) (or more
recent)

## Further details

Always latest result in this scenario:
[latest](https://openqa.opensuse.org/tests=
/latest?arch=3Dx86_64&distri=3Dopensuse&flavor=3DDVD&machine=3D=
64bit&test=3Dextra_tests_textmode&version=3DTumbleweed)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222327581.680287A.448--


--17222453512.71295bA.56
Date: Mon, 29 Jul 2024 09:29:11 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228402

            Bug ID: 1228402
           Summary: [SELinux] need policy for status-mail-gen and ibft-rule-gener systemd generators
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: cathy.hu-at-suse.com
          Reporter: cathy.hu-at-suse.com
        QA Contact: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

SLFO:Main and also maybe factory

install ALpha3 + install merge -> systemctl daemon-reload

----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:121): avc:  denied  { execute } for  =
pid=3D1815
comm=3D"status-mail-gen" path=3D"/usr/bin/bash" dev=3D"vda3" ino=3D1331
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:shell_exec_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:122): avc:  denied  { read } for  pid=
=3D1815
comm=3D"status-mail-gen" name=3D"passwd" dev=3D"overlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:123): avc:  denied  { open } for  pid=
=3D1815
comm=3D"status-mail-gen" path=3D"/etc/passwd" dev=3D"overlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:124): avc:  denied  { getattr } for  =
pid=3D1815
comm=3D"status-mail-gen" path=3D"/etc/passwd" dev=3D"overlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:125): avc:  denied  { execute } for  =
pid=3D1810
comm=3D"ibft-rule-gener" path=3D"/usr/bin/bash" dev=3D"vda3" ino=3D1331
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:shell_exec_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:126): avc:  denied  { search } for  p=
id=3D1810
comm=3D"ibft-rule-gener" name=3D"udev" dev=3D"tmpfs" ino=3D62
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:udev_var_run_t:s0 tclass=3Ddir permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:127): avc:  denied  { getattr } for  =
pid=3D1810
comm=3D"ibft-rule-gener" path=3D"/run/udev/rules.d" dev=3D"tmpfs" ino=3D691
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:udev_var_run_t:s0 tclass=3Ddir permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:128): avc:  denied  { execute } for  =
pid=3D1810
comm=3D"ibft-rule-gener" name=3D"rm" dev=3D"vda3" ino=3D1977
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:bin_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.352:129): avc:  denied  { execute_no_tran=
s } for=20
pid=3D1832 comm=3D"ibft-rule-gener" path=3D"/usr/bin/rm" dev=3D"vda3" ino=
=3D1977
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:bin_t:s0 tclass=3Dfile permissive=3D1
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17222453512.71295bA.56
Date: Mon, 29 Jul 2024 09:29:11 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228402

          Summary
          [SELinux] need policy for status-mail-gen and ibft-rule-gener=
 systemd generators

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          cathy.hu@suse.com

          Reporter
          cathy.hu@suse.com

          QA Contact
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

SLFO:Main and also maybe factory

install ALpha3 + install merge -> systemctl daemon-reload

----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:121): avc:  denied  { execute } for  =
pid=3D1815
comm=3D"status-mail-gen" path=3D"/usr/bin/bash" dev=3D&=
quot;vda3" ino=3D1331
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:shell_exec_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:122): avc:  denied  { read } for  pid=
=3D1815
comm=3D"status-mail-gen" name=3D"passwd" dev=3D"ov=
erlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:123): avc:  denied  { open } for  pid=
=3D1815
comm=3D"status-mail-gen" path=3D"/etc/passwd" dev=3D&qu=
ot;overlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.336:124): avc:  denied  { getattr } for  =
pid=3D1815
comm=3D"status-mail-gen" path=3D"/etc/passwd" dev=3D&qu=
ot;overlay" ino=3D982
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:passwd_file_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:125): avc:  denied  { execute } for  =
pid=3D1810
comm=3D"ibft-rule-gener" path=3D"/usr/bin/bash" dev=3D&=
quot;vda3" ino=3D1331
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:shell_exec_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:126): avc:  denied  { search } for  p=
id=3D1810
comm=3D"ibft-rule-gener" name=3D"udev" dev=3D"tmpf=
s" ino=3D62
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:udev_var_run_t:s0 tclass=3Ddir permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:127): avc:  denied  { getattr } for  =
pid=3D1810
comm=3D"ibft-rule-gener" path=3D"/run/udev/rules.d" dev=
=3D"tmpfs" ino=3D691
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:udev_var_run_t:s0 tclass=3Ddir permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.348:128): avc:  denied  { execute } for  =
pid=3D1810
comm=3D"ibft-rule-gener" name=3D"rm" dev=3D"vda3&q=
uot; ino=3D1977
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:bin_t:s0 tclass=3Dfile permissive=3D1
----
time->Mon Jul 29 10:57:52 2024
type=3DAVC msg=3Daudit(1722243472.352:129): avc:  denied  { execute_no_tran=
s } for=20
pid=3D1832 comm=3D"ibft-rule-gener" path=3D"/usr/bin/rm&quot=
; dev=3D"vda3" ino=3D1977
scontext=3Dsystem_u:system_r:systemd_generic_generator_t:s0
tcontext=3Dsystem_u:object_r:bin_t:s0 tclass=3Dfile permissive=3D1

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222453512.71295bA.56--


body:
Gecko/20100101
Firefox/128.0
Build Identifier:=20

I've installed Aeon RC3 (Aeon-Installer.x86_64-0.1.0-Snapshot20240726.raw) =
on a
ThinkPad T14s AMD Gen1. The installation finished without any errors and Ae=
on
was installed in "Default" mode.

After booting the system, I wanted to see if it actually prevents booting if
the kernel cmdline is modified. So, I hit "e" in the systemd-boot=
 menu, changed
the cmdline, and the system booted without asking for the recovery key, whi=
ch I
did not expect.

I then checked the LUKS header with "cryptsetup luksDump <device&gt=
;" which
reported the following:
tpm2-hash-pcrs: 7
tpm2-pcrlock: false

But pcrlock has to be enabled to prevent tampering of boot config on Aeon,
correct?

I then manually re-enrolled with
systemd-cryptenroll <device> --wipe-slot 2
systemd-cryptenroll <device> --tpm2-device auto

Afterwards, luksDump reports this:
tpm2-hash-pcrs: <empty>
tpm2-pcrlock: true

which is what I would expect. If I now try to modify the cmdline on boot, it
correctly asks for the recovery key.

I've reinstalled 3 times, always with the same behavior. I don't have a tik=
.log
on the stick after installation, is it not saved if the installation finish=
ed
successfully?

Reproducible: Always

Steps to Reproduce:
1. Install Aeon-Installer.x86_64-0.1.0-Snapshot20240726 from USB stick
2. Boot the system, set up initial user account & reboot
3. In systemd-boot, press "e" to edit the kernel cmdline, remove =
"quiet" from
the cmdline and boot
Actual Results:=20=20
System automatically unlocks partition without asking for recovery code.

Expected Results:=20=20
System refuses automatic unlocking of partition, because kernel cmdline has
changed. It asks for the recovery code to unlock.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222604373.3FC864.614--

summary: Aeon RC3 (20240726) automatically unlocks partition even if kernel cmdline is modified


--17222633034.10d44C48.809
Date: Mon, 29 Jul 2024 14:28:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228421

            Bug ID: 1228421
           Summary: Package vulkan-headers does not build with gcc 14 because CMake refuses to use Makefiles
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Other
          Assignee: screening-team-bugs-at-suse.de
          Reporter: mjambor-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: jengelh-at-inai.de
            Blocks: 1220574
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Package vulkan-headers started failing to build with GCC 14 as can be
seen online at:

https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:=
Gcc7/vulkan-headers/standard/x86_64

and can be tried manually with:
osc build --clean --alternative-project home:rguenther:nextgcc

The failure happens straight away during the configuration phase when
Cmake refuses to continue:

  CMake Error in CMakeLists.txt:
    The target named "Vulkan-Module" has C++ sources that may use modules, =
but
    modules are not supported by this generator:

      Unix Makefiles

    Modules are supported only by Ninja, Ninja Multi-Config, and Visual Stu=
dio
    generators for VS 17.4 and newer.  See the cmake-cxxmodules(7) manual f=
or
    details.  Use the CMAKE_CXX_SCAN_FOR_MODULES variable to enable or disa=
ble
    scanning.
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17222633034.10d44C48.809
Date: Mon, 29 Jul 2024 14:28:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228421

          Summary
          Package vulkan-headers does not build with gcc 14 because CMa=
ke refuses to use Makefiles

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Other

          Assignee
          screening-team-bugs@suse.de

          Reporter
          mjambor@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          jengelh@inai.de

          Blocks
          1220574

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Package vulkan-headers started failing to build with GCC 14 =
as can be
seen online at:

https://build.opensuse.org/=
package/live_build_log/openSUSE:Factory:Staging:Gcc7/vulkan-headers/standar=
d/x86_64

and can be tried manually with:
osc build --clean --alternative-project home:rguenther:nextgcc

The failure happens straight away during the configuration phase when
Cmake refuses to continue:

  CMake Error in CMakeLists.txt:
    The target named "Vulkan-Module" has C++ sources that may use=
 modules, but
    modules are not supported by this generator:

      Unix Makefiles

    Modules are supported only by Ninja, Ninja Multi-Config, and Visual Stu=
dio
    generators for VS 17.4 and newer.  See the cmake-cxxmodules(7) manual f=
or
    details.  Use the CMAKE_CXX_SCAN_FOR_MODULES variable to enable or disa=
ble
    scanning.

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222633034.10d44C48.809--


body:
--17222675992.58ADf983.1036
Date: Mon, 29 Jul 2024 15:39:59 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228425

            Bug ID: 1228425
           Summary: Trace in sysfs during setup of hvc
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: S/390-64
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Kernel
          Assignee: kernel-bugs-at-opensuse.org
          Reporter: azouhr-at-opensuse.org
        QA Contact: qa-bugs-at-suse.de
                CC: ada.lovelace-at-gmx.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

The latest Tumbleweed version with kernel-source from Thu Jul 25 12:37:14 C=
EST
2024 fails in openQA because openQA cannot connect to /dev/hvc0

Looking at autoinst-log.txt one can find the following trace:

expect_3270 queue content:
        [    1.846766][   T24] Freeing initrd memory: 75820K=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847487][    T1] Block layer SCSI generic (bsg) driver version
0.4 loaded=20
        (major 250)=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847540][    T1] io scheduler mq-deadline registered=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20
        [    1.847543][    T1] io scheduler kyber registered=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847564][    T1] io scheduler bfq registered=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848365][    T1] shpchp: Standard Hot Plug PCI Controller Dri=
ver
version:=20
        0.4=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848531][    T1] sysfs: cannot create duplicate filename
'/devices/iucv/hv
        c_iucv1827699952'=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848535][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted
6.10.1-1-defaul
        t #1 openSUSE Tumbleweed 84b24c83f5e66871052e51fb35f0e9a59b94613c=
=20=20=20=20=20=20=20
        [    1.848540][    T1] Hardware name: IBM 8561 LT1 400 (z/VM 7.3.0)=
=20=20=20=20=20
        [    1.848543][    T1] Call Trace:=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20
        [    1.848546][    T1]  [<000001aa6da5123a>] dump_stack_lvl+0x72/0x=
98=20=20=20
        [    1.848556][    T1]  [<000001aa6d3fa698>] sysfs_warn_dup+0x78/0x=
90=20=20=20
        [    1.848560][    T1]  [<000001aa6d3fa80a>]
sysfs_create_dir_ns+0xda/0xf0=20=20=20=20=20=20
        [    1.848563][    T1]  [<000001aa6da1d38c>]
kobject_add_internal+0xdc/0x340=20=20

See https://openqa.opensuse.org/tests/4363889/logfile?filename=3Dautoinst-l=
og.txt
Note, that kernel version 6.9.9 still worked in openQA
osc rdiff -r 36fd608fa90d991e150abb50963bb31d:5afd09fb4c6fb64db820aed23183b=
441
openSUSE:Factory:zSystems kernel-source
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17222675992.58ADf983.1036
Date: Mon, 29 Jul 2024 15:39:59 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228425

          Summary
          Trace in sysfs during setup of hvc

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          S/390-64

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Kernel

          Assignee
          kernel-bugs@opensuse.org

          Reporter
          azouhr@opensuse.org

          QA Contact
          qa-bugs@suse.de

          CC
          ada.lovelace@gmx.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

The latest Tumbleweed version with kernel-source from Thu Ju=
l 25 12:37:14 CEST
2024 fails in openQA because openQA cannot connect to /dev/hvc0

Looking at autoinst-log.txt one can find the following trace:

expect_3270 queue content:
        [    1.846766][   T24] Freeing initrd memory: 75820K=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847487][    T1] Block layer SCSI generic (bsg) driver version
0.4 loaded=20
        (major 250)=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847540][    T1] io scheduler mq-deadline registered=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20
        [    1.847543][    T1] io scheduler kyber registered=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.847564][    T1] io scheduler bfq registered=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848365][    T1] shpchp: Standard Hot Plug PCI Controller Dri=
ver
version:=20
        0.4=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848531][    T1] sysfs: cannot create duplicate filename
'/devices/iucv/hv
        c_iucv1827699952'=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20
        [    1.848535][    T1] CPU: 0 PID: 1 Comm: swapper/0 Not tainted
6.10.1-1-defaul
        t #1 openSUSE Tumbleweed 84b24c83f5e66871052e51fb35f0e9a59b94613c=
=20=20=20=20=20=20=20
        [    1.848540][    T1] Hardware name: IBM 8561 LT1 400 (z/VM 7.3.0)=
=20=20=20=20=20
        [    1.848543][    T1] Call Trace:=20=20=20=20=20=20=20=20=20=20=20=
=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=20=
=20=20
        [    1.848546][    T1]  [<000001aa6da5123a>] dump_stack_lvl+0=
x72/0x98=20=20=20
        [    1.848556][    T1]  [<000001aa6d3fa698>] sysfs_warn_dup+0=
x78/0x90=20=20=20
        [    1.848560][    T1]  [<000001aa6d3fa80a>]
sysfs_create_dir_ns+0xda/0xf0=20=20=20=20=20=20
        [    1.848563][    T1]  [<000001aa6da1d38c>]
kobject_add_internal+0xdc/0x340=20=20

See https://openqa.opensuse.org/tests/4363889/logfile?file=
name=3Dautoinst-log.txt
Note, that kernel version 6.9.9 still worked in openQA
osc rdiff -r 36fd608fa90d991e150abb50963bb31d:5afd09fb4c6fb64db820aed23183b=
441
openSUSE:Factory:zSystems kernel-source

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17222675992.58ADf983.1036--

summary: Trace in sysfs during setup of hvc


--17223313583.Ce4d7.2920
Date: Tue, 30 Jul 2024 09:22:38 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228524

            Bug ID: 1228524
           Summary: xfwm4: add missing break to fix use-after-free when alt-tabbing
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: x86-64
               URL: https://gitlab.xfce.org/xfce/xfwm4/-/issues/762
                OS: Linux
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Xfce
          Assignee: bnc-team-xfce-at-forge.provo.novell.com
          Reporter: ohering-at-suse.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

xfwm4 crashes often for me due to invalid pointer usage in tabwinRemoveClie=
nt.
This is apparently fixed upstream.

Process 12345 (xfwm4) of user 1000 dumped core.

Stack trace of thread 12345:
#0  tabwinRemoveClient (xfwm4 + 0x469e9)
#1  clientCycleEventFilter (xfwm4 + 0x20a6c)
#2  eventXfwmFilter (xfwm4 + 0x22f12)
#3  gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf)
#4  gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e1a2)
#5  gdk_display_get_event (libgdk-3.so.0 + 0x388e0)
#6  gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42)
#7  g_main_dispatch (libglib-2.0.so.0 + 0x5afac)
#8  g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0)
#9  g_main_loop_run (libglib-2.0.so.0 + 0x5d402)
#10 gtk_main (libgtk-3.so.0 + 0x1fa945)
#11 clientCycle (xfwm4 + 0x21028)
#12 handleKeyPress (xfwm4 + 0x25324)
#13 eventXfwmFilter (xfwm4 + 0x22f12)
#14 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf)
#15 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e099)
#16 gdk_display_get_event (libgdk-3.so.0 + 0x388e0)
#17 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42)
#18 g_main_dispatch (libglib-2.0.so.0 + 0x5afac)
#19 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0)
#20 g_main_loop_run (libglib-2.0.so.0 + 0x5d402)
#21 gtk_main (libgtk-3.so.0 + 0x1fa945)
#22 main (xfwm4 + 0x11123)
#23 __libc_start_call_main (libc.so.6 + 0x40eec)
#24 __libc_start_main_impl (libc.so.6 + 0x40fb5)
#25 _start (xfwm4 + 0x11291)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17223313583.Ce4d7.2920
Date: Tue, 30 Jul 2024 09:22:38 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228524

          Summary
          xfwm4: add missing break to fix use-after-free when alt-tabbi=
ng

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          x86-64

          URL
          https://gitlab.xfce.org/xfce/xfwm4/-/issues/762

          OS
          Linux

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Xfce

          Assignee
          bnc-team-xfce@forge.provo.novell.com

          Reporter
          ohering@suse.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

xfwm4 crashes often for me due to invalid pointer usage in t=
abwinRemoveClient.
This is apparently fixed upstream.

Process 12345 (xfwm4) of user 1000 dumped core.

Stack trace of thread 12345:
#0  tabwinRemoveClient (xfwm4 + 0x469e9)
#1  clientCycleEventFilter (xfwm4 + 0x20a6c)
#2  eventXfwmFilter (xfwm4 + 0x22f12)
#3  gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf)
#4  gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e1a2)
#5  gdk_display_get_event (libgdk-3.so.0 + 0x388e0)
#6  gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42)
#7  g_main_dispatch (libglib-2.0.so.0 + 0x5afac)
#8  g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0)
#9  g_main_loop_run (libglib-2.0.so.0 + 0x5d402)
#10 gtk_main (libgtk-3.so.0 + 0x1fa945)
#11 clientCycle (xfwm4 + 0x21028)
#12 handleKeyPress (xfwm4 + 0x25324)
#13 eventXfwmFilter (xfwm4 + 0x22f12)
#14 gdk_event_apply_filters (libgdk-3.so.0 + 0x8ddaf)
#15 gdk_event_source_translate_event (libgdk-3.so.0 + 0x8e099)
#16 gdk_display_get_event (libgdk-3.so.0 + 0x388e0)
#17 gdk_event_source_dispatch (libgdk-3.so.0 + 0x8de42)
#18 g_main_dispatch (libglib-2.0.so.0 + 0x5afac)
#19 g_main_context_iterate_unlocked (libglib-2.0.so.0 + 0x5cbd0)
#20 g_main_loop_run (libglib-2.0.so.0 + 0x5d402)
#21 gtk_main (libgtk-3.so.0 + 0x1fa945)
#22 main (xfwm4 + 0x11123)
#23 __libc_start_call_main (libc.so.6 + 0x40eec)
#24 __libc_start_main_impl (libc.so.6 + 0x40fb5)
#25 _start (xfwm4 + 0x11291)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17223313583.Ce4d7.2920--


--17223358903.322d7cdcf.4384
Date: Tue, 30 Jul 2024 10:38:10 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228540

            Bug ID: 1228540
           Summary: [SELinux] avc during boot for int-xenstore-d and qemu-system-i386
    Classification: openSUSE
           Product: openSUSE Tumbleweed
           Version: Current
          Hardware: x86-64
                OS: openSUSE Tumbleweed
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: security-team-at-suse.de
          Reporter: conde.philippe-at-skynet.be
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Created attachment 876364
  --> https://bugzilla.suse.com/attachment.cgi?id=3D876364&action=3Dedit
output of commande ausearch

I have a server with latest openSUSE tumbleweed and with KDE.

I have a VM (with opensuse tumbleweed also) that I start with virtmgr when
needed.

I have activated selinux in permissive mode on the host following your advi=
ce:
https://en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

hpprol2:~ # sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
hpprol2:~ #=20
hpprol2:~ # zypper info selinux-policy
Loading repository data...
Reading installed packages...

Information for package selinux-policy:
---------------------------------------
Repository     : security:SELinux
Name           : selinux-policy
Version        : 20240729-249.1
Arch           : noarch
Vendor         : obs://build.opensuse.org/security:SELinux
Installed Size : 28.3 KiB
Installed      : Yes
Status         : up-to-date
Source package : selinux-policy-20240729-249.1.src
Upstream URL   : https://github.com/fedora-selinux/selinux-policy.git
Summary        : SELinux policy configuration

I boot the xen kernel and receive the errors during boot.
as far as I see the problem is with directory /var/lib/xen which is labeled=
 as

hpprol2:~ # ls -dZ /var/lib/xen
system_u:object_r:xend_var_lib_t:s0 /var/lib/xen
hpprol2:~ # ls -lZ /var/lib/xen/*
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0  209 Jul 30 10:=
24
/var/lib/xen/userdata-d.0.00000000-0000-0000-0000-000000000000.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0  209 Jul 30 10:=
24
/var/lib/xen/userdata-d.1.00000000-0000-0000-0000-000000000000.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul  5 22:=
43
/var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Jul  5 22:=
43
/var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul  5 12:=
01
/var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2181 Jul  5 12:=
01
/var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Mar 17 11:=
47
/var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Mar 17 11:=
47
/var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Oct 20  20=
23
/var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Oct 20  20=
23
/var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json

I attach the ausearch -ts today -m avc output related to this problem

version of xen-tools
Information for package xen-tools:
----------------------------------
Repository     : Main Repository (OSS)
Name           : xen-tools
Version        : 4.18.2_06-2.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 2.8 MiB
Installed      : Yes (automatically)
Status         : up-to-date
Source package : xen-4.18.2_06-2.1.src
Upstream URL   : http://www.cl.cam.ac.uk/Research/SRG/netos/xen/
Summary        : Xen Virtualization: Control tools for domain 0

My vm d=C3=A9fintion /etc/libvirt/libxl/opensusetumbleweed.xml

<domain type=3D"xen">
<name>opensusetumbleweed</name>
<uuid>c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad</uuid>
<metadata>
<libosinfo:libosinfo>
<libosinfo:os id=3D"http://opensuse.org/opensuse/tumbleweed"/>
</libosinfo:libosinfo>
</metadata>
<memory unit=3D"KiB">2097152</memory>
<currentMemory unit=3D"KiB">2097152</currentMemory>
<vcpu placement=3D"static">2</vcpu>
<os>
<type arch=3D"x86_64" machine=3D"xenfv">hvm</type>
<loader type=3D"rom">/usr/lib/xen/boot/hvmloader</loader>
<boot dev=3D"hd"/>
</os>
<features>
<acpi/>
<apic/>
<pae/>
</features>
<clock offset=3D"utc"/>
<on_poweroff>destroy</on_poweroff>
<on_reboot>restart</on_reboot>
<on_crash>destroy</on_crash>
<devices>
<emulator>/usr/lib/xen/bin/qemu-system-i386</emulator>
<disk type=3D"block" device=3D"disk">
<driver name=3D"phy" type=3D"raw"/>
<source dev=3D"/dev/disk/by-id/scsi-3600508b1001c21d488c454a46bc39f22-part1=
"/>
<target dev=3D"hda" bus=3D"ide"/>
<address type=3D"drive" controller=3D"0" bus=3D"0" target=3D"0" unit=3D"0"/>
</disk>
<disk type=3D"block" device=3D"cdrom">
<driver name=3D"qemu" type=3D"raw"/>
<source dev=3D"/dev/sr0"/>
<target dev=3D"hdb" bus=3D"ide"/>
<readonly/>
<address type=3D"drive" controller=3D"0" bus=3D"0" target=3D"0" unit=3D"1"/>
</disk>
<controller type=3D"xenbus" index=3D"0"/>
<controller type=3D"ide" index=3D"0"/>
<interface type=3D"bridge">
<mac address=3D"00:16:3e:9c:13:3e"/>
<source bridge=3D"br0"/>
</interface>
<serial type=3D"pty">
<target port=3D"0"/>
</serial>
<console type=3D"pty">
<target type=3D"serial" port=3D"0"/>
</console>
<input type=3D"mouse" bus=3D"ps2"/>
<input type=3D"keyboard" bus=3D"ps2"/>
<graphics type=3D"vnc" port=3D"-1" autoport=3D"yes">
<listen type=3D"address"/>
</graphics>
<video>
<model type=3D"vga" vram=3D"16384" heads=3D"1" primary=3D"yes"/>
</video>
<memballoon model=3D"xen"/>
</devices>
</domain>
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17223358903.322d7cdcf.4384
Date: Tue, 30 Jul 2024 10:38:10 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228540

          Summary
          [SELinux] avc during boot for int-xenstore-d and qemu-system-=
i386

          Classification
          openSUSE

          Product
          openSUSE Tumbleweed

          Version
          Current

          Hardware
          x86-64

          OS
          openSUSE Tumbleweed

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          security-team@suse.de

          Reporter
          conde.philippe@skynet.be

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Created attachment=
 876364 [details]
output of commande ausearch

I have a server with latest openSUSE tumbleweed and with KDE.

I have a VM (with opensuse tumbleweed also) that I start with virtmgr when
needed.

I have activated selinux in permissive mode on the host following your advi=
ce:
https:/=
/en.opensuse.org/Portal:SELinux/Setup#Tumbleweed

hpprol2:~ # sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          permissive
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Memory protection checking:     actual (secure)
Max kernel policy version:      33
hpprol2:~ #=20
hpprol2:~ # zypper info selinux-policy
Loading repository data...
Reading installed packages...

Information for package selinux-policy:
---------------------------------------
Repository     : security:SELinux
Name           : selinux-policy
Version        : 20240729-249.1
Arch           : noarch
Vendor         : obs://build.opensuse.org/security:SELinux
Installed Size : 28.3 KiB
Installed      : Yes
Status         : up-to-date
Source package : selinux-policy-20240729-249.1.src
Upstream URL   : https://github.com/fedora-selinux/selinux-policy.git
Summary        : SELinux policy configuration

I boot the xen kernel and receive the errors during boot.
as far as I see the problem is with directory /var/lib/xen which is labeled=
 as

hpprol2:~ # ls -dZ /var/lib/xen
system_u:object_r:xend_var_lib_t:s0 /var/lib/xen
hpprol2:~ # ls -lZ /var/lib/xen/*
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0  209 Jul 30 10:=
24
/var/lib/xen/userdata-d.0.00000000-0000-0000-0000-000000000000.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0  209 Jul 30 10:=
24
/var/lib/xen/userdata-d.1.00000000-0000-0000-0000-000000000000.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul  5 22:=
43
/var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Jul  5 22:=
43
/var/lib/xen/userdata-d.2.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Jul  5 12:=
01
/var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2181 Jul  5 12:=
01
/var/lib/xen/userdata-d.3.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Mar 17 11:=
47
/var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Mar 17 11:=
47
/var/lib/xen/userdata-d.4.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2257 Oct 20  20=
23
/var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libvirt-xml
-rw-------. 1 root root system_u:object_r:xend_var_lib_t:s0 2121 Oct 20  20=
23
/var/lib/xen/userdata-d.8.c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad.libxl-json

I attach the ausearch -ts today -m avc output related to this problem

version of xen-tools
Information for package xen-tools:
----------------------------------
Repository     : Main Repository (OSS)
Name           : xen-tools
Version        : 4.18.2_06-2.1
Arch           : x86_64
Vendor         : openSUSE
Installed Size : 2.8 MiB
Installed      : Yes (automatically)
Status         : up-to-date
Source package : xen-4.18.2_06-2.1.src
Upstream URL   : http://www.cl.cam.ac.uk/Research/SRG/netos/xen/
Summary        : Xen Virtualization: Control tools for domain 0

My vm d=C3=A9fintion /etc/libvirt/libxl/opensusetumbleweed.xml

<!--

WARNING: THIS IS AN AUTO-GENERATED FILE. CHANGES TO IT ARE LIKELY TO BE
OVERWRITTEN AND LOST. Changes to this xml configuration should be made usin=
g:
  virsh edit opensusetumbleweed
or other application using the libvirt API.
-->
<domain type=3D"xen">
<name>opensusetumbleweed</name>
<uuid>c33dd6e1-0a2d-4a5a-9f8b-9f3d804840ad</uuid>
<metadata>
<libosinfo:libosinfo>
<libosinfo:os id=3D"http://opensuse.org/opensuse/tumbleweed"/>
</libosinfo:libosinfo>
</metadata>
<memory unit=3D"KiB">2097152</memory>
<currentMemory unit=3D"KiB">2097152</currentMemory>
<vcpu placement=3D"static">2</vcpu>
<os>
<type arch=3D"x86_64" machine=3D"xenfv">hvm</t=
ype>
<loader type=3D"rom">/usr/lib/xen/boot/hvmloader</loader=
>
<boot dev=3D"hd"/>
</os>
<features>
<acpi/>
<apic/>
<pae/>
</features>
<clock offset=3D"utc"/>
<on_poweroff>destroy</on_poweroff>
<on_reboot>restart</on_reboot>
<on_crash>destroy</on_crash>
<devices>
<emulator>/usr/lib/xen/bin/qemu-system-i386</emulator>
<disk type=3D"block" device=3D"disk">
<driver name=3D"phy" type=3D"raw"/>
<source dev=3D"/dev/disk/by-id/scsi-3600508b1001c21d488c454a46bc39f=
22-part1"/>
<target dev=3D"hda" bus=3D"ide"/>
<address type=3D"drive" controller=3D"0" bus=3D&quot=
;0" target=3D"0" unit=3D"0"/>
</disk>
<disk type=3D"block" device=3D"cdrom">
<driver name=3D"qemu" type=3D"raw"/>
<source dev=3D"/dev/sr0"/>
<target dev=3D"hdb" bus=3D"ide"/>
<readonly/>
<address type=3D"drive" controller=3D"0" bus=3D&quot=
;0" target=3D"0" unit=3D"1"/>
</disk>
<controller type=3D"xenbus" index=3D"0"/>
<controller type=3D"ide" index=3D"0"/>
<interface type=3D"bridge">
<mac address=3D"00:16:3e:9c:13:3e"/>
<source bridge=3D"br0"/>
</interface>
<serial type=3D"pty">
<target port=3D"0"/>
</serial>
<console type=3D"pty">
<target type=3D"serial" port=3D"0"/>
</console>
<input type=3D"mouse" bus=3D"ps2"/>
<input type=3D"keyboard" bus=3D"ps2"/>
<graphics type=3D"vnc" port=3D"-1" autoport=3D"=
yes">
<listen type=3D"address"/>
</graphics>
<video>
<model type=3D"vga" vram=3D"16384" heads=3D"1&q=
uot; primary=3D"yes"/>
</video>
<memballoon model=3D"xen"/>
</devices>
</domain>

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17223358903.322d7cdcf.4384--


--17223608037.feEF.538
Date: Tue, 30 Jul 2024 17:33:23 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228596

            Bug ID: 1228596
           Summary: VUL-0: CVE-2024-41671: python-Twisted: matrix-synapse: HTTP pipelined requests processed out of order in twisted.web
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
               URL: https://smash.suse.de/issue/415505/
                OS: Other
            Status: NEW
          Severity: Major
          Priority: P5 - None
         Component: Security
          Assignee: mrueckert-at-suse.com
          Reporter: camila.matos-at-suse.com
        QA Contact: security-team-at-suse.de
                CC: camila.matos-at-suse.com, python-maintainers-at-suse.com,
                    security-team-at-suse.de, smash_bz-at-suse.de
            Blocks: 1228549
  Target Milestone: ---
          Found By: Security Response Team
           Blocker: ---

+++ This bug was initially created as a clone of Bug #1228549 +++

Twisted is an event-based framework for internet applications, supporting
Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could proc=
ess
pipelined HTTP requests out-of-order, possibly resulting in information
disclosure. This vulnerability is fixed in 24.7.0rc1.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-41671
https://www.cve.org/CVERecord?id=3DCVE-2024-41671
https://github.com/twisted/twisted/commit/046a164f89a0f08d3239ecebd750360f8=
914df33
https://github.com/twisted/twisted/commit/4a930de12fb67e88fefcb8822104152f4=
2b27abc
https://github.com/twisted/twisted/security/advisories/GHSA-c8m8-j448-xjx7
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17223608037.feEF.538
Date: Tue, 30 Jul 2024 17:33:23 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228596

          Summary
          VUL-0: CVE-2024-41671: python-Twisted: matrix-synapse: HTTP p=
ipelined requests processed out of order in twisted.web

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          URL
          https://smash.suse.de/issue/415505/

          OS
          Other

          Status
          NEW

          Severity
          Major

          Priority
          P5 - None

          Component
          Security

          Assignee
          mrueckert@suse.com

          Reporter
          camila.matos@suse.com

          QA Contact
          security-team@suse.de

          CC
          camila.matos@suse.com, python-maintainers@suse.com, s=
ecurity-team@suse.de, smash_bz@suse.de

          Blocks
          1228549

          Target Milestone
          ---

          Found By
          Security Response Team

          Blocker
          ---

+++ This bug was initially created as a clone of Bug #1228549 +++

Twisted is an event-based framework for internet applications, supporting
Python 3.6+. The HTTP 1.0 and 1.1 server provided by twisted.web could proc=
ess
pipelined HTTP requests out-of-order, possibly resulting in information
disclosure. This vulnerability is fixed in 24.7.0rc1.

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=3DCVE-2024-41671
https://www.c=
ve.org/CVERecord?id=3DCVE-2024-41671
https://github.com/twisted/twisted/commit/046a164f89a0f=
08d3239ecebd750360f8914df33
https://github.com/twisted/twisted/commit/4a930de12fb67=
e88fefcb8822104152f42b27abc
https://github.com/twisted/twisted/security/advisories/GHSA-c8m=
8-j448-xjx7

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17223608037.feEF.538--


--17224141943.aB4a5D.1873
Date: Wed, 31 Jul 2024 08:23:14 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228628

            Bug ID: 1228628
           Summary: VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities fixed in 127.0.6533.88
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: Security
          Assignee: gmbr3-at-opensuse.org
          Reporter: gianluca.gabrielli-at-suse.com
        QA Contact: qa-bugs-at-suse.de
                CC: security-team-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

Critical CVE-2024-6990: Uninitialized Use in Dawn. Reported by gelatin dess=
ert
on 2024-07-15

High CVE-2024-7255: Out of bounds read in WebTransport. Reported by Marten
Richter on 2024-07-13

High CVE-2024-7256: Insufficient data validation in Dawn. Reported by gelat=
in
dessert on 2024-07-23
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17224141943.aB4a5D.1873
Date: Wed, 31 Jul 2024 08:23:14 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228628

          Summary
          VUL-0: chromium,ungoogled-chromium: multiple vulnerabilities =
fixed in 127.0.6533.88

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          Security

          Assignee
          gmbr3@opensuse.org

          Reporter
          gianluca.gabrielli@suse.com

          QA Contact
          qa-bugs@suse.de

          CC
          security-team@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

Critical CVE-2024-6990: Uninitialized Use in Dawn. Reported =
by gelatin dessert
on 2024-07-15

High CVE-2024-7255: Out of bounds read in WebTransport. Reported by Marten
Richter on 2024-07-13

High CVE-2024-7256: Insufficient data validation in Dawn. Reported by gelat=
in
dessert on 2024-07-23

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17224141943.aB4a5D.1873--


--17224290892.D34dfd3.2653
Date: Wed, 31 Jul 2024 12:31:29 +0000
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

https://bugzilla.suse.com/show_bug.cgi?id=3D1228652

            Bug ID: 1228652
           Summary: ibus-setup-libpinyin crashes on a fresh Leap 15.6
    Classification: openSUSE
           Product: openSUSE Distribution
           Version: Leap 15.6
          Hardware: Other
                OS: Other
            Status: NEW
          Severity: Normal
          Priority: P5 - None
         Component: X11 Applications
          Assignee: screening-team-bugs-at-suse.de
          Reporter: hillwoodroc-at-gmail.com
        QA Contact: qa-bugs-at-suse.de
  Target Milestone: ---
          Found By: ---
           Blocker: ---

hillwood@hillwood-HP:~> /usr/lib64/ibus/ibus-setup-libpinyin

(ibus-setup-libpinyin:13262): Gtk-CRITICAL **: 20:30:15.860:
_gtk_css_lookup_resolve: assertion '(((__extension__ ({ GTypeInstance *__in=
st =3D
(GTypeInstance*) ((provider)); GType __t =3D
((_gtk_style_provider_private_get_type ())); gboolean __r; if (!__inst) __r=
 =3D
(0); else if (__inst->g_class && __inst->g_class->g_type =3D=3D __t) __r =
=3D (!(0));
else __r =3D g_type_check_instance_is_a (__inst, __t); __r; }))))' failed
/usr/share/ibus-libpinyin/setup/main2.py:78: Warning: g_object_set_data_ful=
l:
assertion 'G_IS_OBJECT (object)' failed
  self.__builder.add_from_file("ibus-libpinyin-preferences.ui")

(ibus-setup-libpinyin:13262): Gtk-ERROR **: 20:30:15.864: Can't create a
GtkStyleContext without a display connection
=E8=BF=BD=E8=B8=AA=E4=B8=8E=E4=B8=AD=E6=96=AD=E7=82=B9=E9=99=B7=E9=98=B1 (=
=E6=A0=B8=E5=BF=83=E5=B7=B2=E8=BD=AC=E5=82=A8)
--=20
You are receiving this mail because:
You are on the CC list for the bug.=

--17224290892.D34dfd3.2653
Date: Wed, 31 Jul 2024 12:31:29 +0000
MIME-Version: 1.0
Content-Type: text/html; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Bugzilla-URL: https://bugzilla.suse.com/
Auto-Submitted: auto-generated

      <base href=3D"https://bugzilla.suse.com/" />

          Bug ID
          1228652

          Summary
          ibus-setup-libpinyin crashes on a fresh Leap 15.6

          Classification
          openSUSE

          Product
          openSUSE Distribution

          Version
          Leap 15.6

          Hardware
          Other

          OS
          Other

          Status
          NEW

          Severity
          Normal

          Priority
          P5 - None

          Component
          X11 Applications

          Assignee
          screening-team-bugs@suse.de

          Reporter
          hillwoodroc@gmail.com

          QA Contact
          qa-bugs@suse.de

          Target Milestone
          ---

          Found By
          ---

          Blocker
          ---

hillwood@hillwood-HP:~> /usr/lib64/ibus/ibus-setup-li=
bpinyin

(ibus-setup-libpinyin:13262): Gtk-CRITICAL **: 20:30:15.860:
_gtk_css_lookup_resolve: assertion '(((__extension__ ({ GTypeInstance *__in=
st =3D
(GTypeInstance*) ((provider)); GType __t =3D
((_gtk_style_provider_private_get_type ())); gboolean __r; if (!__inst) __r=
 =3D
(0); else if (__inst->g_class && __inst->g_class->g_type =
=3D=3D __t) __r =3D (!(0));
else __r =3D g_type_check_instance_is_a (__inst, __t); __r; }))))' failed
/usr/share/ibus-libpinyin/setup/main2.py:78: Warning: g_object_set_data_ful=
l:
assertion 'G_IS_OBJECT (object)' failed
  self.__builder.add_from_file("ibus-libpinyin-preferences.ui")

(ibus-setup-libpinyin:13262): Gtk-ERROR **: 20:30:15.864: Can't create a
GtkStyleContext without a display connection
=E8=BF=BD=E8=B8=AA=E4=B8=8E=E4=B8=AD=E6=96=AD=E7=82=B9=E9=99=B7=E9=98=B1 (=
=E6=A0=B8=E5=BF=83=E5=B7=B2=E8=BD=AC=E5=82=A8)

      You are receiving this mail because:
=20=20=20=20=20=20

You are on the CC list for the bug.

=

--17224290892.D34dfd3.2653--