On 4/14/21 1:26 AM, Ed Greshko wrote:
On 14/04/2021 11:41, home user wrote:
Last night, in ".bash_profile", I commented out the block of code that
launches xeyes, and shut down for the night.
This morning, I booted up and logged in, No xeyes. I downloaded a
Chinese music video. I then launched caja. Before I tried doing
anything in it, a SELinux alert appeared,
So it seems that xeyes has nothing to do with this problem.
I tried launching "files". I did not see any SELinux alerts.
Your AVC you posted was....
type=AVC msg=audit(1618332726.288:964): avc: denied { write } for
pid=129605 co
mm="gstglcontext"
path=2F6D656D66643A2F2E6E76696469615F6472762E5858585858582028646
56C6574656429 dev="tmpfs" ino=1025
scontext=unconfined_u:unconfined_r:thumb_t:s0-s
0:c0.c1023 tcontext=system_u:object_r:xserver_tmpfs_t:s0 tclass=file
permissive=0
Are all of your alerts of this kind? You may want to use "ausearch"
with -c gstglcontext.
You can narrow the window by using -ts in the ausearch command. Looking
a the man page
to find the options for that parameter.
After doing the above described test, I ran the command to get
everything from the start of yesterday. I posted the results in a
simple text file on the google drive. Here's the link:
"https://drive.google.com/file/d/1-BSwKWu_Mi3CozfLRi2dQmzPndi3HHqj/view?usp=sharing";
That being said, gstglcontext is related to OpenGL which "is a
cross-language, cross-platform application programming interface (API)
for rendering 2D and 3D vector graphics". The "scontext" has as part of
it xserver_tmpfs_t which furthers this.
So, the next time you get this alert check out the AVC and find the
process associated with pid=.
I tried that using "ps -ef | grep [pid]". The only hit was the ps
command itself.
I still have the SELinux alert details for the past several days. I can
post anything that you want to see, if that would help.
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
