On Mon, Dec 18, 2017 at 10:10 AM, Adam Williamson
<adamwill(a)fedoraproject.org> wrote:
On Mon, 2017-12-18 at 09:01 -0600, mcatanzaro(a)gnome.org wrote:
> * Remove setroubleshoot (mcatanzaro, 14:29:45)
> * AGREED: Remove setroubleshoot from default Workstation install,
> without replacement. (mcatanzaro, 14:44:46)
14:49:54 <mcatanzaro> We'll see how it works out... fortunately, errors
are quite rare nowadays.
A rather large part of the reason why errors are rare is that they are
found, reported and fixed by pre-release testers. Removing
setroubleshoot from the default desktop install *at a stroke* makes it
vastly less likely that pre-release testers will do this. I'm not super
happy with this call.
It seems rather baffling, honestly - it almost seems like you voted in
favour of getting worse bug reports. Yes, maybe problems will still be
reported, but you'll get reports against *your* components like "app
doesn't start" or "app can't open file for some reason" rather
than a
report against selinux-policy that is a precisely targeted description
of an selinux denial and, 90% of the time, will be *read and fixed by
someone else without you ever having to see it*. Do you all really love
doing triage work, or something?
I agree. But an improvement would be for abrt gui to be able to report
AVC denials directly to bugzilla, filed against selinux policy.
--
Chris Murphy