On 3/5/20 9:15 AM, François Patte wrote:
Le 05/03/2020 à 14:16, Ed Greshko a écrit :
On 2020-03-05 21:02, François Patte wrote:
Le 05/03/2020 à 13:53, Ed Greshko a écrit :
When the server fails to start with selinux enabled what do you get with
ausearch -m AVC,USER_AVC -ts recent
[root@dipankar ~]# ausearch -m AVC,USER_AVC -ts recent
It is "odd" that you are getting so many but the one that is related to dictd is
----
time->Thu Mar 5 13:59:45 2020
type=AVC msg=audit(1583413185.069:328): avc: denied { map } for
pid=8869 comm="dictd"
path="/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.index"
dev="dm-4" ino=402 scontext=system_u:system_r:dictd_t:s0
tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
----
sudo journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
Journal file
/var/log/journal/bd9a117e29a44dd4b335896e866a41d2/system@0005995d04fbac9f-d1196d9ceef66b92.journal~
is truncated, ignoring file.
-- Logs begin at Sun 2019-10-20 16:16:14 CEST, end at Thu 2020-03-05
17:59:01 CET. --
mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to get filesystem
list from rpm
mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
info for /opt/share/stardict/dic/stardict->
mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
info for selinux-policy
mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
info for selinux-policy
From your other email, there are these messages:
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.605:331): avc: denied { read } for
> pid=8876 comm="setroubleshootd" name="Packages" dev="dm-2" ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
> ----
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.841:332): avc: denied { read } for
> pid=8878 comm="rpm" name="Packages" dev="dm-2" ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
> ----
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.842:333): avc: denied { read } for
> pid=8878 comm="rpm" name="Packages" dev="dm-2" ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
setroubleshootd is not able to determine the package for the file, so
it's not able to give the fix message.
What is the output of "ls -lZ /var/lib/rpm".
My guess for your original problem is that the security was tightened on
the dict server. You either need to put the files in the expected
directory (most likely somewhere under /usr/share/dict/) or maybe label
the /opt/share/stardict with the right label. Check the labels on
/usr/share/dict/ and /usr/share/dict/dictd.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
