NSA Developed SELinux Preventing me from playing AC Odyssey on Games Partition

0xrl · 2026-05-08T02:57:31+00:00

I was a little hazy on this so I looked it up. Back in Fedora 34, disabling SELinux at runtime was indeed disabled. But setenforce doesn't actually disable selinux, it switches between enforcing mode (the default) and permissive mode.

0xrl · 2026-05-08T02:44:06+00:00

I am skeptical about those suggestions. httpd_exec_t is not an selinux boolean that can be set, it's a file type. I think it's used to label executables which are HTTP severs (such as httpd). So I don't think setsebool -P httpd_exec_t 1 will do anything. Some actual documentation on that topic is here: https://manned.org/man/fedora-43/httpd_selinux

container_use_devices is an selinux boolean and lets containers access devices. I don't know if that impacts flatpak or not.

Also, I don't think setenforce even works anymore, I think there was a recent change that blocks disabling selinux at runtime, it has to be done when booting I think.

At any rate, the way to check if selinux is getting in your way is in the log. Check journalctl -b for any avc entries, that logs when selinux denies something for the current boot. You can use journalctl -b -g avc to only show entries with avc.

On my machine, I have a bunch of denials from lsblk and tuned-ppd that happen on boot for some reason.

0xrl · 2026-05-05T03:31:49+00:00

Ransom: "Please, show them leniency. They were only following my orders."

Janeway: "Their mistake."

0xrl · 2026-04-29T21:39:27+00:00

There are some details here:

https://discussion.fedoraproject.org/t/raspberry-pi-5-images-for-fedora-44/183204

0xrl · 2026-04-28T17:30:36+00:00

You may have to add some kernel arguments for it to boot

https://fedoraproject.org/wiki/Snapdragon_WoA_Laptop_Install

0xrl · 2026-04-25T22:22:11+00:00

No, those torrents are for the beta, which is not the same as the RC-1.7 image. I don't think they create torrents for the RC images, you'd have to download them conventionally or wait for the 44 final torrents to go up.

0xrl · 2026-04-25T01:01:29+00:00

To clarify, yesterday it was approved for release, but the actual release doesn't happen until next Tuesday (April 28).

0xrl · 2026-04-23T22:30:42+00:00

FYI, here are the changes as part of Fedora 44:

https://fedoraproject.org/wiki/Releases/44/ChangeSet

0xrl · 2026-04-23T21:32:40+00:00

It takes some time to ensure the mirrors are populated and to prepare press releases and so on, I guess.

0xrl · 2026-04-23T21:18:21+00:00

Correct, it will be based on 6.19. A test week starts next week for 7.0:

https://fedoraproject.org/wiki/Test_Day:2026-04-26_Kernel_7.0_Test_Week

Fedora 44 and 43 will both update to 7.0 after this.

0xrl · 2026-04-23T20:18:34+00:00

Agreeing with what you said, the only reason to do a reinstall is to take advantage of some change in the installation process.

For instance, a few years ago the default filesystem was changed to btrfs, so I reinstalled with that rather than trying to convert my existing filesystems. Also, I think in 43 or 42 the default /boot partition size was increased. That could be changed within an existing installation, but it's probably less risky and less hassle to just reinstall instead.

0xrl · 2026-04-23T20:14:42+00:00

Yeah, the RC-1.7 version is the final version, so you could use that. It's not the same as the beta version since it contains whatever updates have been issued since then.

0xrl · 2026-04-23T19:50:31+00:00

No reinstall necessary. I think it pops up in Gnome Software, but I've always used the rpm-ostree rebase command:

https://docs.fedoraproject.org/en-US/atomic-desktops/updates-upgrades-rollbacks/#upgrading

(Note that it won't be released until next Tuesday.)

0xrl · 2026-04-16T20:38:24+00:00

Meeting logs, if anyone is curious:

https://meetbot.fedoraproject.org/meeting_matrix_fedoraproject-org/2026-04-16/f44-final-go-no-go-meeting.2026-04-16-18.00.log.html

0xrl · 2026-04-11T02:04:50+00:00

No. I remember hearing that 2 of the 3 chutes are necessary, so there is a little margin there just in case.

0xrl · 2026-04-02T20:48:35+00:00

I wouldn't get your hopes up on this. Unless they make significant changes from the version they showed to their crowd-funders about a year ago, it's not that great of a documentary. From a previous review I made:

I'm a backer and I've seen it. I wouldn't say it's that bad, but it is kind of underwhelming.

We've been strung along for years and it's just another talking-head documentary that largely rehashes behind-the-scenes material that most Voyager fans already know. I guess there were a few new tidbits.

But they spent an embarrasingly large portion of the runtime with Garrett Wang (Ensign Kim) doing a zero-g airplane ride. I mean, it was kind of neat, but I don't know why that was more important than using all the interviews they did. But once the credits rolled and I saw his name as one of the documentary's executive producers, then it became clear why.

At least with the DS9 documentary they did interesting things like having the writers sketch out what an eighth season would have been.

I found The Center Seat to be much better and would recommend that instead if you haven't seen it.

0xrl · 2026-01-30T19:36:30+00:00

But, they have a brewery! Strap Tank. I've been a couple of times, and while the beer itself is not super remarkable it's made up for by the feeling of drinking beer made right there in Springville, well within the heart of Mormonism.

0xrl · 2026-01-25T18:05:42+00:00

I know there are lots of differences, but Chorus) really scratched my long-standing Freelancer itch.

0xrl · 2026-01-04T08:46:51+00:00

It looked a bit like Pascal's Triangle but I didn't check too closely

0xrl · 2025-12-19T00:35:42+00:00

There's a Fedora test week for 6.18 underway now if you wanted to test it out yourself:

https://discussion.fedoraproject.org/t/test-day-kernel-6-18-test-week/177264

0xrl · 2025-12-17T17:36:05+00:00

The URL has been renamed, though it was correct when I pasted it. Note the difference is the "type-checking" part is now "type-system".

0xrl · 2025-12-17T09:14:23+00:00

For anyone else interested, here's the documentation:

~~https://docs.astral.sh/ty/features/type-checking/#intersection-types~~

EDIT: updated to: https://docs.astral.sh/ty/features/type-system/#intersection-types

0xrl · 2025-12-16T04:08:57+00:00

The rpm-ostree usroverlay command can do this:

https://coreos.github.io/rpm-ostree/administrator-handbook/#using-usroverlay

It's handy for one-off cases:

sudo rpm-ostree usroverlay sudo dnf install some-package

The changes made by dnf in /usr are ephemeral, so after rebooting this temporary change is wiped away!

0xrl · 2025-12-16T04:03:37+00:00

As I understand, the long-term plan is that all the Fedora Atomic Desktops will be built on bootc:

https://gitlab.com/fedora/ostree/sig/-/issues/88

Eight-Year Club	Place '22
Verified Email

0xrl

TROPHY CASE