On Fri, 2009-02-20 at 11:15 +0000, Frank Murphy wrote:
> Gnome-Schedule opens, but cannot update any tasks.
> ~/audit/.log
> doesn't show any specific denials.
> Hpappens as pure root, (sudo, su) user
>
> sudo gnome-schedule
> Access denied by SELinux, must be privileged to use -u
Have the same issue. After semodule -DB, got these:
#============= chkpwd_t ==============
selinux_getattr_fs(chkpwd_t)
selinux_search_fs(chkpwd_t)
selinux_set_generic_booleans(chkpwd_t)
#============= crontab_t ==============
allow crontab_t chkpwd_t:process { siginh noatsecure rlimitinh };
allow crontab_t security_t:security compute_av;
selinux_getattr_fs(crontab_t)
selinux_set_generic_booleans(crontab_t)
#============= dgrift_sudo_t ==============
allow dgrift_sudo_t unconfined_t:process { siginh noatsecure
rlimitinh };
userdom_search_admin_dir(dgrift_sudo_t)
#============= dgrift_t ==============
allow dgrift_t dgrift_sudo_t:process { siginh noatsecure rlimitinh };
#============= semanage_t ==============
allow semanage_t setfiles_t:process { siginh noatsecure rlimitinh };
Will try to figure out which of these solves this issue.
> --
> fedora-selinux-list mailing list
> fedora-selinux-list@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
