Bug 1215628

Summary: unbound fails to start under openSUSE MicroOS
Product: [openSUSE] openSUSE Tumbleweed Reporter: Jakob Lorenz <proprietaer1>
Component: NetworkAssignee: Michael Ströder <michael>
Status: RESOLVED FIXED QA Contact: E-mail List <qa-bugs>
Severity: Normal    
Priority: P5 - None    
Version: Current   
Target Milestone: ---   
Hardware: aarch64   
OS: Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Jakob Lorenz 2023-09-23 09:38:51 UTC
steps to reproduce:

1. install unbound `transactional-update pkg in unbound`
2. reboot your system
3. try to start unbound.service
4. unbound fails to start

systemctl status unbound.service

systemd[1]: Starting Unbound recursive Domain Name Server...
(sudo)[1552]: unbound.service: Failed to locate executable /usr/bin/sudo: Permission denied
systemd[1]: unbound.service: Control process exited, code=exited, status=203/EXEC
systemd[1]: unbound.service: Failed with result 'exit-code'.
systemd[1]: Failed to start Unbound recursive Domain Name Server.

It's maybe related to SELinux /var/log/audit/audit.log:

type=AVC msg=audit(1695461159.115:842): avc:  denied  { execute } for  pid=1552 comm="(sudo)" name="sudo" dev="sda2" ino=14092 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:sudo_exec_t:s0 tclass=file permissive=0

Unfortunately I have no idea about SELinux, any help would be appreciated.
Comment 1 OBSbugzilla Bot 2024-03-08 13:35:02 UTC
This is an autogenerated message for OBS integration:
This bug (1215628) was mentioned in
https://build.opensuse.org/request/show/1156332 Factory / unbound
Comment 2 Jakob Lorenz 2024-03-08 18:57:26 UTC
fixed in https://build.opensuse.org/request/show/1156332