Symlinks obviously ends with non-expected SELinux contexts. I think this
is actually a bug in SELinux policy for Network Manager. Because target
file has wrong selinux context.
$ ls -Z /run/NetworkManager/no-stub-resolv.conf
system_u:object_r:NetworkManager_var_run_t:s0
/run/NetworkManager/no-stub-resolv.conf
$ ls -Z /etc/resolv.conf
system_u:object_r:net_conf_t:s0 /etc/resolv.conf
Fix that by:
rm -f /etc/resolv.conf
touch /etc/resolv.conf
systemctl restart NetworkManager.service
If the file is good old plain text file, it would get permissions as it
always had.
On 28. 05. 22 14:51, Sam Varshavchik wrote:
It seems that uninstalling systemd-resolved and repointing
/etc/resolv.conf ends up breaking chrony:
type=AVC msg=audit(1653741361.179:318): avc: denied { getattr } for
pid=856 comm="chronyd" path="/run/NetworkManager/no-stub-resolv.conf"
dev="tmpfs" ino=1525 scontext=system_u:system_r:chronyd_t:s0
tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=file
permissive=0
This is spamming me every minute, now.
Bug 2091275
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
--
Petr Menšík
Software Engineer, RHEL
Red Hat, http://www.redhat.com/
PGP: DFCF908DB7C87E8E529925BC4931CA5B6C9FC5CB
_______________________________________________
users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
