On 14/04/2021 11:41, home user wrote:
Tomorrow morning, I will try the no-xeyes test that you suggest.
Ignoring the problem is tempting, but I don't want to give up toooooo easily.
Well, pardon me for saying I find that last observation somewhat narrow in scope. :-) :-)
That being said....
Your AVC you posted was....
type=AVC msg=audit(1618332726.288:964): avc: denied { write } for pid=129605 co
mm="gstglcontext" path=2F6D656D66643A2F2E6E76696469615F6472762E5858585858582028646
56C6574656429 dev="tmpfs" ino=1025 scontext=unconfined_u:unconfined_r:thumb_t:s0-s
0:c0.c1023 tcontext=system_u:object_r:xserver_tmpfs_t:s0 tclass=file permissive=0
Are all of your alerts of this kind? You may want to use "ausearch" with -c gstglcontext.
You can narrow the window by using -ts in the ausearch command. Looking a the man page
to find the options for that parameter.
That being said, gstglcontext is related to OpenGL which "is a cross-language, cross-platform application programming interface (API) for rendering 2D and 3D vector graphics". The "scontext" has as part of it xserver_tmpfs_t which furthers this.
So, the next time you get this alert check out the AVC and find the process associated with pid=.
--
Remind me to ignore comments which aren't germane to the thread.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
