Google drive probably. The first few lines should tell you what process it was starting. I really usually only look at filesystem type calls as those are usually the most valuable for something like this. open, unlink (remove), stat (get info like ls shows), and say rename or renameat. A lot of stats always fail as it is used to see if various things exist here or there. Basic it loads an executable, lots of setup of that executable then toward the end is the real work the program does. On a mv strace I get 117 lines with the executable and options at the top, a bunch of loading of libs and stuff for executable then 10 lines from the bottom is the actual rename, and the exit of the program. On Thu, Apr 15, 2021 at 11:49 AM home user <mattisonw@xxxxxxxxxxx> wrote: > > (responding to multiple posts) > > As Ed requested, this morning I signed in to "GNOME on Xorg" first. My > tests were as follows. > > Test A. > 1. Using the command line in a terminal, I downloaded a Chinese music > video. The resulting file has a name made of traditional (Taiwan) > Chinese characters. > 2. I launched caja. > A SELinux alert pops up. > 3. I used caja to rename the file to something with all ASCII characters. > A Selinux alert pops up. > Steps 2 and 3 were done a few times. For step 2, the SELinux alert > occurs the first time only. > For step 3, the SELinux alert occurs every time. > > Then Test B. > 1. I did "strace -o caja.out -f /usr/bin/caja". > 2. I used caja to rename a file to something with all ASCII characters. > A Selinux alert pops up. > 3. I closed caja by clicking the little x in the upper right corner of > the GUI. > > Then Test C. > 1. I launched Files. > 2. I used Files to rename a file to something with all ASCII characters. > 3. I closed Files by clicking the little x in the upper right corner of > the GUI. > No SELinux alerts. > > Then Test D. > 1. I launched caja. > 2. I used caja to rename a file to something with all ASCII characters. > 3. I closed caja by clicking the little x in the upper right corner of > the GUI. > No SELinux alerts. > > Files seems to do something that prevents any further SELinux alerts > from caja for the rest of the day. > > I did: > bash.2[~]: su - > Password: > -bash.1[~]: ausearch -c gstglcontext -ts today > ausearch_Thurs.txt > -bash.2[~]: vi ausearch_Thurs.txt > Based on time stamps, I found that the process ID for Test B was 2636. > I did: > bash.17[~]: grep 2636 caja.out > grep2636.out > The resulting file is over 34000 lines long. How can I pare this down? > What should I put on the google drive for y'all to view? > _______________________________________________ > users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx > To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx > Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx > Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
