Re: puzzling SELinux alert.

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 4/13/21 12:48 PM, Roger Heflin wrote:
I see a lot of /memfd: in lsof it appears to be anonymous files (ie
temp files).   I am going to guess memfd is memory file descriptor, ie
a temp file created in memory.

Usually they are going to not actually exist anywhere in a fs.  And
generally the app that opens/creates them is the app that is going to
immediately use it.

if selinux is blocking it I would think it should cause some sort of
issues with the owner/application using the file.

  lsof | grep "/memfd:/.nvidia"  will show you the owner of the
specific file.   For the nvidia_drv one it looks like Xorg (on my
system, may Wayland if you are using that) opens it.

I've attached the output of "lsof | grep "/memfd:/.nvidia"". When I ran that, caja, a terminal, and xeyes were running.

On mine in lsof I have hundreds using the .nvidia_drv.XXXXXX one and
all have the same node in lsof so all are the same object, probably
created by the display owner.

It may be that caja itself is not granted the proper selinux
permissions to use that resource and is hence getting the error.  Ie
the error may not be that the file is missing options but that the
application is not allowed access to the file.

When I ran the renames and deletes in caja, they all worked properly even though I received the SELinux alerts in some cases. Would that have been so if caja was lacking SELinux permissions?

you might try the restorecon against the caja executable itself

On Tue, Apr 13, 2021 at 12:41 PM home user <mattisonw@xxxxxxxxxxx> wrote:

[... snip ...]
-bash.7[~]: lsof | grep "/memfd:/.nvidia"
lsof: WARNING: can't stat() fuse.gvfsd-fuse file system /run/user/1001/gvfs
      Output information may be incomplete.
Xorg        1005                             root  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
Xorg        1005                             root   26u      REG                0,1   1724416       1025 /memfd:/.nvidia_drv.XXXXXX (deleted)
Xorg        1005   1033 InputThre            root  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
Xorg        1005   1033 InputThre            root   26u      REG                0,1   1724416       1025 /memfd:/.nvidia_drv.XXXXXX (deleted)
gnome-she   1340                             bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1346 gmain                bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1357 gdbus                bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1359 dconf\x20            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1364 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1365 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1366 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1367 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1368 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1369 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1370 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   1371 JS\x20Hel            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340   3968 threaded-            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130318 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130319 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130320 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130321 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130322 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130323 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130324 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
gnome-she   1340 130325 pool-gnom            bill  DEL       REG                0,1                 1025 /memfd:/.nvidia_drv.XXXXXX
-bash[~]: 
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [EPEL Devel]     [Fedora Magazine]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Desktop]     [Fedora Fonts]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Fedora Sparc]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux