Le 05/03/2020 à 22:00, Samuel Sieb a écrit :
> On 3/5/20 9:15 AM, François Patte wrote:
>> Le 05/03/2020 à 14:16, Ed Greshko a écrit :
>>> On 2020-03-05 21:02, François Patte wrote:
>>>> Le 05/03/2020 à 13:53, Ed Greshko a écrit :
>>>>> When the server fails to start with selinux enabled what do you get
>>>>> with
>>>>>
>>>>> ausearch -m AVC,USER_AVC -ts recent
>>>>>
>>>> [root@dipankar ~]# ausearch -m AVC,USER_AVC -ts recent
>>>
>>> It is "odd" that you are getting so many but the one that is related
>>> to dictd is
>>>
>>>> ----
>>>> time->Thu Mar 5 13:59:45 2020
>>>> type=AVC msg=audit(1583413185.069:328): avc: denied { map } for
>>>> pid=8869 comm="dictd"
>>>> path="/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.index"
>>>> dev="dm-4" ino=402 scontext=system_u:system_r:dictd_t:s0
>>>> tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
>>>> ----
>>>>
>>>
>>> sudo journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
>>
>> journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
>> Journal file
>> /var/log/journal/bd9a117e29a44dd4b335896e866a41d2/[email protected]~
>>
>> is truncated, ignoring file.
>> -- Logs begin at Sun 2019-10-20 16:16:14 CEST, end at Thu 2020-03-05
>> 17:59:01 CET. --
>> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to get filesystem
>> list from rpm
>> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
>> info for /opt/share/stardict/dic/stardict->
>> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
>> info for selinux-policy
>> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
>> info for selinux-policy
>
> From your other email, there are these messages:
>> time->Thu Mar 5 13:59:48 2020
>> type=AVC msg=audit(1583413188.605:331): avc: denied { read } for
>> pid=8876 comm="setroubleshootd" name="Packages" dev="dm-2" ino=655505
>> scontext=system_u:system_r:setroubleshootd_t:s0
>> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
>> ----
>> time->Thu Mar 5 13:59:48 2020
>> type=AVC msg=audit(1583413188.841:332): avc: denied { read } for
>> pid=8878 comm="rpm" name="Packages" dev="dm-2" ino=655505
>> scontext=system_u:system_r:setroubleshootd_t:s0
>> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
>> ----
>> time->Thu Mar 5 13:59:48 2020
>> type=AVC msg=audit(1583413188.842:333): avc: denied { read } for
>> pid=8878 comm="rpm" name="Packages" dev="dm-2" ino=655505
>> scontext=system_u:system_r:setroubleshootd_t:s0
>> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
>
> setroubleshootd is not able to determine the package for the file, so
> it's not able to give the fix message.
>
> What is the output of "ls -lZ /var/lib/rpm".total 126120 -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16687104 5 mars 11:47 Basenames -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 20480 16 févr. 10:57 Conflictname -rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 311296 5 mars 22:22 __db.001 -rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 90112 5 mars 22:22 __db.002 -rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 1318912 5 mars 22:22 __db.003 -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 6496256 5 mars 11:47 Dirnames -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 3 janv. 18:34 Enhancename -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 3 janv. 18:34 Filetriggername -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 36864 5 mars 11:47 Group -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 40960 5 mars 11:47 Installtid -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 151552 5 mars 11:47 Name -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 98304 5 mars 11:47 Obsoletename -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 100007936 5 mars 11:47 Packages -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 2306048 5 mars 11:47 Providename -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 20480 5 mars 11:47 Recommendname -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 1179648 5 mars 11:47 Requirename -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 299008 5 mars 11:47 Sha1header -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 167936 5 mars 11:47 Sigmd5 -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 16 févr. 10:57 Suggestname -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 15 févr. 19:25 Supplementname -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 1 févr. 22:14 Transfiletriggername -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 9 févr. 11:42 Triggername -- François Patte UFR de mathématiques et informatique Laboratoire CNRS MAP5, UMR 8145 Université Paris Descartes 45, rue des Saints Pères F-75270 Paris Cedex 06 Tél. +33 (0)6 7892 5822 http://www.math-info.univ-paris5.fr/~patte FSF https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-from-the-fsf
signature.asc
Description: OpenPGP digital signature
_______________________________________________ users mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected]
