Le 05/03/2020 à 22:59, Samuel Sieb a écrit : > On 3/5/20 1:30 PM, François Patte wrote: >> Le 05/03/2020 à 22:00, Samuel Sieb a écrit : >>> What is the output of "ls -lZ /var/lib/rpm". >> >> total 126120 >> -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16687104 5 >> mars 11:47 Basenames > > Was this before or after the fixfiles? It should be: > -rw-r--r--. 1 root root unconfined_u:object_r:rpm_var_lib_t:s0 35680256 > Mar 1 23:45 Basenames > - > Try "restorecon -rv /var/lib/rpm". If "ls -lZ /var/lib/rpm" shows the > right permissions, then try causing the dictd error again and see if you > get an setroubleshootd message now. Today, setroubleshoot condescended to open a window and tell me what to do: 1- SELinux interdit à dictd d'utiliser l'accès map sur le fichier /opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz. ie.: SELinux forbids dictd to use map access on file /opt/... Do: setsebool -P domain_can_mmap_files 1 2- For permanent access do: semanage fcontext -a -t FILE_TYPE '/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz' where FILE_TYPE is one of the following value : abrt_helper_exec_t, dictd_exec_t, dictd_var_lib_t, file_context_t, fonts_cache_t, fonts_t, ld_so_cache_t, ld_so_t, lib_t, locale_t, nscd_var_run_t, passwd_file_t, pkcs11_modules_conf_t, prelink_exec_t, sssd_public_t, textrel_shlib_t. Well, I took my crystal ball and choose dictd_exec_t..... Then I did: restorecon -v '/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz' Remark: <irony> it is easy to understand what to do!!! and what to choose! </irony> Why suddenly, selinux stopped to allow dictd to use map access to this file? (I recall that I did not change anything to the dictd config) How long this solution will last? -- François Patte UFR de mathématiques et informatique Laboratoire CNRS MAP5, UMR 8145 Université Paris Descartes 45, rue des Saints Pères F-75270 Paris Cedex 06 Tél. +33 (0)6 7892 5822 http://www.math-info.univ-paris5.fr/~patte FSF https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-from-the-fsf
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
