Windows boot trashes grub
by Greg Woods
I have two identical Dell Latitude E7470 laptops. On each of them, when I
got them I booted a Fedora Live USB stick, installed gparted, and used it
to shrink down the Windows 10 partition to make room for Fedora. I have
done this process on a lot of laptops going back a lot of years, and this
is the first time I have seen this problem.
On one of the laptops, as soon as I boot into Windows 10, I can no longer
boot Linux. GRUB is somehow trashed and the only way to boot the system is
to select "Windows Boot Manager" in the BIOS, which successfully boots
Windows 10. The other laptop does not have this problem; I can boot
Windows, then get the usual GRUB menu at the next boot and select either
Windows or Fedora, and all is good.
Has anyone ever seen this kind of problem before? Is there a way to recover
GRUB? Last time this happened, I ended up having to completely reinstall
Fedora to get the system back to dual boot. It has now happened again and I
would like to avoid having to reinstall to recover. I would, of course,
also like to prevent this from happening in the first place.
The systems are both using EFI boot, without secureboot.
Thanks for any insights,
--Greg
5 years, 11 months
selinux issue with dovecot after upgrade from F27 to F28
by George Avrunin
I upgraded my office machine from F27 to F28 last night, using dnf
system-upgrade. In most respects, the upgrade went fine. (There are
some annoyances with sddm, but once I found out how to get rid of the
user list in gdm, going back to gdm seems to be fine.)
But I'm getting constant notices from selinux about AVC denials that
seem to have to do with dovecot doing indexing. (I run dovecot on
this machine as an imap server for my personal mail.) The
setroubleshoot details window has:
----------------------------------------------------------------------
SELinux is preventing dovecot from using the dac_override capability.
***** Plugin dac_override (91.4 confidence) suggests **********************
If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system
Then turn on full auditing to get path information about the offending file and generate the error again.
Do
Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.
***** Plugin catchall (9.59 confidence) suggests **************************
If you believe that dovecot should have the dac_override capability by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'dovecot' --raw | audit2allow -M my-dovecot
# semodule -X 300 -i my-dovecot.pp
Additional Information:
Source Context system_u:system_r:dovecot_t:s0
Target Context system_u:system_r:dovecot_t:s0
Target Objects Unknown [ capability ]
Source dovecot
Source Path dovecot
Port <Unknown>
Host ext.math.umass.edu
Source RPM Packages
Target RPM Packages
Policy RPM selinux-policy-3.14.1-24.fc28.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name ext.math.umass.edu
Platform Linux ext.math.umass.edu 4.16.5-300.fc28.x86_64 #1
SMP Fri Apr 27 17:38:36 UTC 2018 x86_64 x86_64
Alert Count 122
First Seen 2018-05-03 02:21:04 EDT
Last Seen 2018-05-03 12:52:59 EDT
Local ID 019bb172-93a2-4c4c-b0fc-21a2c16e138b
Raw Audit Messages
type=AVC msg=audit(1525366379.312:365): avc: denied { dac_override } for pid=9354 comm="indexer-worker" capability=1 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:system_r:dovecot_t:s0 tclass=capability permissive=0
Hash: dovecot,dovecot_t,dovecot_t,capability,dac_override
----------------------------------------------------------------------
I ran ausearch as suggested but I don't see any mention of specific file.
I haven't found anything about this issue in a web search or on Common
Bugs.
I guess I can create a policy module to get rid of these, but I wanted
to check on whether there's something wrong with my setup before I do
that. I did a full relabel (with /.autorelabel and a reboot; it
complained about conflicts between rpms in /var/cache/system-upgrade
and /var/lib/system-upgrade, but seemed to finish ok) and that didn't
help. This machine has been upgraded through several iterations of
upgrades from about 4 years ago (Fedora 19 or 20?), so there might
well be some issues with the selinux contexts left over somewhere. I
assume this is the kind of indexing that's reported in the daily
logwatch mail, with something like "dovecot[2441]:
indexer-worker(avrunin): Indexed 2 messages in Department.RCF (UIDs
11991..11992): 1 Time(s)", so that the files causing the problem are
in my home directory under ~/Maildir. These files have context "system_u:object_r:mail_home_rw_t:s0".
Thanks for any suggestions.
George
5 years, 11 months
Mouse pointer moves but does not click
by Paul Smith
Dear All,
My mouse moves but does not click.
I have a file open and unsaved on VirtualBox. How can I proceed in
order to avoid the lost of the changes I did on the mentioned open
file?
The keyboard is working and I am using Fedora 28.
Thanks in advance,
Paul
5 years, 11 months
Smooth upgrade -- Thank you
by SternData
It just gets better and better. The only little tweak I had from FC27 to
FC28 was finding gnome-tweak-tool got renamed to gnome-tweaks.
Thanks to everyone on the Fedora team for making this upgrade such a
non-event.
It just works! :-)
--
-- Steve
5 years, 11 months
Firefox ESR for F28?
by Terry Polzin
Is there a Firefox ESR for F28, I just upgraded and have found that
firefox and java are having certificate issues trying to run a JNLP
application.
5 years, 11 months
The /crypt method to support habitual clean installs of Fedora
without losing data
by Temlakos
Everyone:
One of you (I don't know who it was) shared with me an excellent method
of making possible a clean reinstallation of Fedora--going above and
beyond the "manual upgrade" described in the Installation Guide, that
amounts to erasing the /root directory but leaving alone all other
directories, not only /home but /usr, /etc, /bin, /tmp, /var, and any
others I might have left out. This method preserves user data on a
physically separate filesystem (an HDD or SSD). But it does not mount
this separate filesystem as /home. The /home directory remains a part of
the main filesystem and gets erased and reinaugurated, just like /usr,
/etc, /var, and all the rest of them.
Rather, one establishes another mount point called /crypt and mounts the
second filesystem at that point. On that filesystem, one creates (as the
SuperUser or as a Wheel member) a separate directory for every user
account. Within each user-account directory, are the directories named
Documents, Pictures, Music, Public, Templates, Videos, and whatever
other directories have you (including bin, which I find indispensible to
my operations). On the original "home directory" of each user, one
erases all these standard directories and sets up symbolic links to the
directories residing on the second filesystem and addressable as
/crypt/UserName/Documents (or Pictures or whatever) (where you replace
"UserName" with the name of a registered user of the system).
The problem I have now: I've forgotten the specific syntax of the mount
command, which I have to use to mount the /crypt filesystem /and make
sure it stays mounted/ between one session and the next. Before I begin
my "clean reinstall" of Fedora 28, I'd like to review the required
commands, especially "mount" and "ln". I also think this method would be
of benefit to anyone here who would like to preserve user data but wants
to make sure that /all/ the directories in the main filesystem get
cleaned up. You see, for several iterations of Fedora, I tried using the
automatic upgrade method. The problem: certain "dirty configuration
statements," for lack of a better term, kept propagating from one
iteration to the next. With the result that Fedora 26 was an inoperable
mess and I was glad to start "clean" with Fedora 27. Of course I also
acquired two Solid State Drives, one 150 GB and one 1 TB, and sought the
best way to use both to support truly "clean" installs.
Whoever you are, let me give a shout-out to you, and ask you to remind
me again what steps to take, and the syntax of the key commands I need.
Or you can check me on this:
The syntax I have worked out for the commands to mount the auxiliary
filesystem as /crypt is:
$ sudo mkdir /crypt
$ sudo mount -t ext4 /dev/sdb2 /crypt
(Here I start with "$ sudo" instead of "#" because to get a "#" prompt I
have to execute "su," and that can be dangerous.)
The syntax for establishing a symlink is even simpler:
ln -s /crypt/UserName/Dir
where UserName is the name of a specific created user, and Dir is
Documents, Pictures, Music, Public, Templates, Videos, and anything else
I want to preserve from one iteration of Fedora to the next. Of course I
have to remove the "hard" directories that Fedora normally sets up
before I execute these link commands.
To whoever invented this method: am I missing anything?
Thank you in advance.
Temlakos
5 years, 11 months
pip install as non-root on Fedora
by Ian Pilcher
Is it possible to get $SUBJECT working? I need to install 'grip' from
https://github.com/joeyespo/grip, and trying to do so as a normal user
isn't working (permission denied errors trying to write to
/usr/lib/python2.7/site-packages).
--
========================================================================
Ian Pilcher arequipeno(a)gmail.com
-------- "I grew up before Mark Zuckerberg invented friendship" --------
========================================================================
5 years, 11 months
No way to set hostname during install from f28 live?
by Tom Horsley
I'm installing fedora 28 from the "install to disk" option
of the workstation live CD.
I don't appear to ever get an opportunity to set the
hostname to anything other than the default localhost.localdomain.
Did I miss it, or is this just something I need to change
following the install?
5 years, 11 months
Claws-Mail doesn't start on FC28.
by Erik P. Olsen
Claws-Mail doesn't start on FC28 because it can't find libnsl.so.1. A softlink to
libnsl.so.2 fixes the issue.
--
Venlig hilsen,
Erik P. Olsen
5 years, 11 months