Re: puzzling SELinux alert.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I see a lot of /memfd: in lsof it appears to be anonymous files (ie
temp files).   I am going to guess memfd is memory file descriptor, ie
a temp file created in memory.

Usually they are going to not actually exist anywhere in a fs.  And
generally the app that opens/creates them is the app that is going to
immediately use it.

if selinux is blocking it I would think it should cause some sort of
issues with the owner/application using the file.

 lsof | grep "/memfd:/.nvidia"  will show you the owner of the
specific file.   For the nvidia_drv one it looks like Xorg (on my
system, may Wayland if you are using that) opens it.

On mine in lsof I have hundreds using the .nvidia_drv.XXXXXX one and
all have the same node in lsof so all are the same object, probably
created by the display owner.

It may be that caja itself is not granted the proper selinux
permissions to use that resource and is hence getting the error.  Ie
the error may not be that the file is missing options but that the
application is not allowed access to the file.

you might try the restorecon against the caja executable itself

On Tue, Apr 13, 2021 at 12:41 PM home user <mattisonw@xxxxxxxxxxx> wrote:
>
> At least 3 times in the past few days I've seen the same SELinux alert.
> I put the text of the details in the attached file "alerts.txt".  All 3
> occurrences were while using caja to rename or delete a file, though it
> does not happen every time I rename or delete a file in caja.  These
> alerts confuse me.  There is no directory "/memdf:"...
>
> -bash.1[~]: cd /
> -bash.2[/]: ls -a
> .    boot    etc   lib64       mnt   root  srv system-upgrade       usr
> ..   .cache  home  lost+found  opt   run   sys system-upgrade-root  var
> bin  dev     lib   media       proc  sbin  sysroot  tmp
> -bash.3[/]: ls -a /memfd*
> ls: cannot access '/memfd*': No such file or directory
> -bash.4[/]:
>
> Also, the directory name (ending with a colon?) looks fishy. Further,
> the filename ".nvidia_drv.XXXXXX" looks fishy (but "legal").
>
> The instruction does not work:
>
> -bash.4[/]: /sbin/restorecon -v /memfd:/.nvidia_drv.XXXXXX (deleted)
> -bash: syntax error near unexpected token `('
> -bash.4[/]:
>
> -bash.5[/]: /sbin/restorecon -v /memfd:/.nvidia_drv.XXXXXX
> /sbin/restorecon: SELinux: Could not get canonical path for
> /memfd:/.nvidia_drv.XXXXXX restorecon: No such file or directory.
> -bash.6[/]:
>
> I gather that a directory and or file (whatever its name really is) are
> missing?
>
> How do I fix this?
> _______________________________________________
> users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
> To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
> Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure



[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux