On Tue, Aug 2, 2011 at 1:29 PM, Jerry James <loganjerry@xxxxxxxxx> wrote:
> Unfortunately, I can't test it. I waited for today's Rawhide update
> so I could get the new version of ipython. About 2 seconds after the
> yum transaction finished, X suddenly quit. I rebooted (since there
> was a new kernel and a new systemd, after all), but now I can't login.
> Logging in from GDM results in the screen clearing for a fraction of
> a second, and then GDM starts back up. Likewise, Ctrl-Alt-F2 gives me
> a TTY. If I attempt to login, the screen clears momentarily, and then
> the TTY login prompt reappears. Plus, GDM keeps restarting every few
> seconds, which makes working on a TTY problematic anyway. Something
> is really broken. As soon as the brokenness gets cleared up, I'll
> test python-polybori to see if it is okay with the new ipython.
It looks like the problem is SELinux-related. I did a full relabel to
see if it would clear things up, but it didn't. I can login
successfully after booting with enforcing=0, though. I'm seeing lots
of AVC denials in the logs. Here are the denials I see in
/var/log/messages (with enforcing=0):
[ 8.206691] type=1400 audit(1312314954.461:3): avc: denied {
dyntransition } for pid=1 comm="systemd"
scontext=system_u:system_r:kernel_t:s0
tcontext=system_u:system_r:init_t:s0 tclass=process
[ 11.777659] type=1400 audit(1312314958.032:4): avc: denied { read
} for pid=572 comm="systemd-sysctl" name="sysctl.conf" dev=dm-1
ino=131521 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:system_conf_t:s0 tclass=file
[ 11.781152] type=1400 audit(1312314958.035:5): avc: denied { open
} for pid=572 comm="systemd-sysctl" name="sysctl.conf" dev=dm-1
ino=131521 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:system_conf_t:s0 tclass=file
[ 11.800415] type=1400 audit(1312314958.055:6): avc: denied {
getattr } for pid=572 comm="systemd-sysctl" path="/etc/sysctl.conf"
dev=dm-1 ino=131521 scontext=system_u:system_r:udev_t:s0-s0:c0.c1023
tcontext=system_u:object_r:system_conf_t:s0 tclass=file
[ 17.387700] type=1400 audit(1312314963.642:7): avc: denied {
relabelto } for pid=663 comm="systemd-tmpfile" name="seats" dev=tmpfs
ino=12579 scontext=system_u:system_r:systemd_tmpfiles_t:s0
tcontext=system_u:object_r:systemd_logind_var_run_t:s0 tclass=dir
[ 17.393413] type=1400 audit(1312314963.648:8): avc: denied {
relabelto } for pid=663 comm="systemd-tmpfile" name="sessions"
dev=tmpfs ino=12583 scontext=system_u:system_r:systemd_tmpfiles_t:s0
tcontext=system_u:object_r:systemd_logind_sessions_t:s0 tclass=dir
[ 19.280082] type=1400 audit(1312314965.535:9): avc: denied {
unlink } for pid=677 comm="NetworkManager" name="resolv.conf"
dev=dm-1 ino=131244 scontext=system_u:system_r:NetworkManager_t:s0
tcontext=system_u:object_r:etc_t:s0 tclass=file
[ 19.629917] type=1400 audit(1312314965.884:10): avc: denied {
name_bind } for pid=840 comm="dhclient" src=11807
scontext=system_u:system_r:dhcpc_t:s0
tcontext=system_u:object_r:port_t:s0 tclass=udp_socket
[ 20.125998] type=1400 audit(1312314966.380:11): ac: denied {
rename } for pid=904 comm="Xorg" name="Xorg.0.log" dev=dm-1 ino=392488
scontext=system_u:system_r:xserver_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_log_t:s0 tclass=file
[ 20.130982] type=1400 audit(1312314966.384:12): avc: denied {
unlink } for pid=904 comm="Xorg" name="Xorg.0.log.old" dev=dm-1
ino=392491 scontext=system_u:system_r:xserver_t:s0-s0:c0.c1023
tcontext=system_u:object_r:var_log_t:s0 tclass=file
[ 607.234395] type=1400 audit(1312315564.790:13): avc: denied {
read } for pid=1745 comm="sendmail" name="online" dev=sysfs ino=34
scontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
tcontext=system_u:object_r:sysfs_t:s0 tclass=file
[ 607.234488] type=1400 audit(1312315564.790:14): avc: denied {
open } for pid=1745 comm="sendmail" name="online" dev=sysfs ino=34
scontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
tcontext=system_u:object_r:sysfs_t:s0 tclass=file
In addition, looking back farther in the log, I see LOTS of these when
SELinux was in enforcing mode:
avc: denied { sigchld } for pid=1 comm="systemd"
scontext=system_u:system_r:loadkeys_t:s0
tcontext=system_u:system_r:kernel_t:s0 tclass=process
Also, I can test now, and it looks like python-polybori is broken by
the new ipython. When I try to run ipbori, I get an ipython help
message, followed by this:
[TerminalIPythonApp] Unrecognized flag: '-rcfile'
So ... what? Is --ipython-dir what we should use now?
--
Jerry James
http://www.jamezone.org/
--
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
