On samedi 16 septembre 2017 13:56:19 CEST Mads Villadsen wrote:
> I'm running Fedora 27 and sometime during the last 3 days or so a problem
> has started occurring that causes it to take 15 seconds to unlock the
> screen and turn on the display. While it is unlocking the keyboard becomes
> unresponsive (hitting the caps lock key for instance doesn't turn on the
> LED).
> It also takes a significant amount of time to transition from the Fedora
> logo boot screen to the login screen - and while this goes on the keyboard
> is also unresponsive.
> I have tried various things such as using Xorg or Wayland as well as booting
> older kernels but I haven't been able to figure out what is causing this.
> It is happening on a Dell XPS 13.
>
> Is anyone else seeing something similar? What can I provide to help debug
> the issue?
> Kind regards,
> Mads
>
Pinpointed the issue to this SELinux denial:
>SELinux is preventing fprintd from map access on the file /usr/libexec/
>fprintd.
>
>***** Plugin catchall (100. confidence) suggests
**************************
>
>If you believe that fprintd should be allowed map access on the fprintd file
>>by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># ausearch -c 'fprintd' --raw | audit2allow -M my-fprintd
># semodule -X 300 -i my-fprintd.pp
>
>Additional Information:
>Source Context system_u:system_r:init_t:s0
>Target Context system_u:object_r:fprintd_exec_t:s0
>Target Objects /usr/libexec/fprintd [ file ]
>Source fprintd
>Source Path fprintd
>Port <Unknown>
>Host Themisto
>Source RPM Packages
>Target RPM Packages fprintd-0.8.0-1.fc27.x86_64
>Policy RPM selinux-policy-3.13.1-283.fc27.noarch
>Selinux Enabled True
>Policy Type targeted
>Enforcing Mode Enforcing
>Host Name Themisto
>Platform Linux Themisto 4.13.0-0.rc7.git0.1.fc27.x86_64
>#1
> SMP Mon Aug 28 02:33:21 UTC 2017 x86_64 x86_64
>Alert Count 1
>First Seen 2017-09-18 14:02:11 CEST
>Last Seen 2017-09-18 14:02:11 CEST
>Local ID 690fe676-308e-4442-a372-c279001c7ac8
>
>Raw Audit Messages
>type=AVC msg=audit(1505736131.821:219): avc: denied { map } for pid=3371
>comm="fprintd" path="/usr/libexec/fprintd" dev="sda7" ino=1248976
>scontext=system_u:system_r:init_t:s0
>tcontext=system_u:object_r:fprintd_exec_t:s0 tclass=file permissive=0
>
>
>Hash: fprintd,init_t,fprintd_exec_t,file,map
>
Allowing it by running the provided commands:
># ausearch -c 'fprintd' --raw | audit2allow -M my-fprintd
># semodule -X 300 -i my-fprintd.pp
>
made sudo fast again
_______________________________________________
devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx
