Barry wrote: >> On 7 Mar 2023, at 17:58, Patrick Dupre <pdupre@xxxxxxx> wrote: >> >> I can run scilab as root user, but as a standard user, I get: >> >> /usr/bin/chcon: failed to change context of '/usr/local/scilab/scilab-6.1.1/bin/scilab-bin' to ‘unconfined_u:object_r:execmem_exec_t:s0’: Operation not permitted >> Error: Cannot chcon 'scilab-bin' >> >> Can I fix this issue? > > Are you running a setup/install script? > I would not expect chcon in an app start script. And yet, the scilab command appears to do just that. :( The code looks to come from here: https://gitlab.com/search?search=chcon&nav_source=navbar&project_id=3330423&group_id=1609406&search_code=true&repository_ref=6.1 The chcon calls were added 11 years ago, in: https://gitlab.com/scilab/scilab/-/commit/fde269e73db4705fb19804fdd23f3185b54e2b7b This added a function named `check_and_disable_selinux()` with the comment "If enabled, disable se_linux." That's just software which has not kept up with the times. > Is scilab from a Fedora RPM? The /usr/local prefix makes that highly unlikely. And `dnf provides /usr/local/scilab` doesn't return anything. I think this is an upstream issue and would be better asked in their forums and/or bug tracker. It shouldn't need to run chcon at all. If it must, it ought to check that the file doesn't already have the desired SELinux type, which would avoid the issue. Or you could install it somewhere within your home directory instead of in a root-owned location like /usr/local. -- Todd
Attachment:
signature.asc
Description: PGP signature
_______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue
