F28 selinux policy problem with logwatch?
by Robert Moskowitz
I am getting the following security alert. If I am reading it right,
logwatch is the culprit, so I am surprised. The message does tell me
how to allow this activity, but again if this is logwatch, why is it not
setting policy right?
SELinux is preventing mktemp from write access on the directory
.esmtp_queue.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that mktemp should be allowed write access on the
.esmtp_queue directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'mktemp' --raw | audit2allow -M my-mktemp
# semodule -X 300 -i my-mktemp.pp
Additional Information:
Source Context system_u:system_r:logwatch_t:s0-s0:c0.c1023
Target Context system_u:object_r:mail_home_rw_t:s0
Target Objects .esmtp_queue [ dir ]
Source mktemp
Source Path mktemp
Port <Unknown>
Host lx121e.htt-consult.com
Source RPM Packages
Target RPM Packages
Policy RPM selinux-policy-3.14.1-29.fc28.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name lx121e.htt-consult.com
Platform Linux lx121e.htt-consult.com
4.16.11-300.fc28.x86_64 #1 SMP Tue May 22
18:29:09
UTC 2018 x86_64 x86_64
Alert Count 1
First Seen 2018-05-28 03:17:06 EDT
Last Seen 2018-05-28 03:17:06 EDT
Local ID 769bacbf-0a48-48cf-8c93-27360ffcfdda
Raw Audit Messages
type=AVC msg=audit(1527491826.281:568): avc: denied { write } for
pid=21956 comm="mktemp" name=".esmtp_queue" dev="sda3" ino=1450925
scontext=system_u:system_r:logwatch_t:s0-s0:c0.c1023
tcontext=system_u:object_r:mail_home_rw_t:s0 tclass=dir permissive=0
Hash: mktemp,logwatch_t,mail_home_rw_t,dir,write
5 years, 11 months
Xorg.log.0
by Amadeus WM
Should there be an Xorg.log.0 in fedora 28? How come I don't have one
after a brand new install?
5 years, 11 months
fc28 failed upgrade
by Amadeus WM
I was upgrading my kids' computer from f25 to f28. I went from 25-26,
26-27, but when I went from 27->28, there was a power outage due to bad
weather. I don't know at what stage the interruption occurred, because I
was not following the install process. Upon reboot, it still said fedora
27 and I rerun
dnf system-upgrade reboot
multiple times, even attempted the 27-28 upgrade from scratch. Every
time, the system reboots straight into the usual f27 login prompt (I'm
not running gdm).
On the system I now have a mixture of f27 and f28 packages.
dnf check
shows things like
xz-libs-5.2.3-4.fc27.i686 is a duplicate with xz-libs-5.2.3-4.fc27.x86_64
xz-libs-5.2.3-4.fc27.i686 is a duplicate with xz-libs-5.2.4-2.fc28.x86_64
yajl-2.1.0-8.fc27.x86_64 is a duplicate with yajl-2.1.0-10.fc28.x86_64
zlib-1.2.11-4.fc27.i686 is a duplicate with zlib-1.2.11-4.fc27.x86_64
zlib-1.2.11-4.fc27.i686 is a duplicate with zlib-1.2.11-8.fc28.x86_64
255 in total.
I tried installing f28 from a usb stick, but the display is messed-up
and, after all my efforts with a crippled display, it crashed. Trying to
install via VNC did not work either - neither the direct or connect
method.
Any way to get out of this mess?
5 years, 11 months
memaker failure
by Tim
Hi,
I saw an intriguing sounding package in the updates mail, memaker.
Though it fails to launch.
If I try it from the command line, I get this unfamiliar set of
messages in return:
INFO:root:python-launchpadlib not found!
Traceback (most recent call last):
File "/usr/bin/memaker", line 55, in <module>
from MeMaker.app import MeMakerApp
File "/usr/lib/python2.7/site-packages/MeMaker/app.py", line 41, in <module>
from utils.paths import MeMakerPaths
File "/usr/lib/python2.7/site-packages/MeMaker/utils/paths.py", line 23, in <module>
from xdg import BaseDirectory as xdg
ImportError: No module named xdg
Trying what seems the first obvious thing to look for, produces no results:
sudo dnf search launchpadlib
It was installed with: sudo dnf search memaker
Which dragged in these dependencies.
memaker.noarch 20100110-12.fc26
ORBit2.x86_64 2.14.19-15.fc24
gnome-python2.x86_64 2.28.1-19.fc26
gnome-python2-gnomevfs.x86_64 2.28.1-19.fc26
gnome-python2-rsvg.x86_64 2.32.0-26.fc26
gnome-vfs2.x86_64 2.24.4-22.fc26
gnome-vfs2-common.noarch 2.24.4-22.fc26
libIDL.x86_64 0.8.14-12.fc26
libbonobo.x86_64 2.32.1-11.fc26
notify-python.x86_64 0.1.1-32.fc26
python2-nose.noarch 1.3.7-13.fc26
python2-numpy.x86_64 1:1.12.1-1.fc26
python2-olefile.noarch 0.45.1-1.fc26
python2-pillow.x86_64 4.1.1-1.fc26
--
[tim@localhost ~]$ uname -rsvp
Linux 4.16.7-100.fc26.x86_64 #1 SMP Wed May 2 21:45:56 UTC 2018 x86_64
Boilerplate: All mail to my mailbox is automatically deleted.
There is no point trying to privately email me, I only get to see
the messages posted to the mailing list.
If 2001: A Space Odyssey taught us anything, it's that Siri will,
one day, murder us all.
5 years, 11 months
gitlab on Fedora 28
by Ranjan Maitra
Dear friends,
An user had, in 2016, installed a gitlab (8.x, don't recall x anymore) version that was the latest at the time using the EL7 RPM. However, the upgrade to Fedora 28 has stopped this from working. We tried upgrading gitlab using step by step the 8.x+ version but it is unable to update and unusable.
Any suggestions as to what we should be looking at and how to fix this. I guess the hope is to have a functional gitlab on the Fedora 28 system.
Feel free to ask for more information: I am not sure what to provide.
Many thanks,
Ranjan
5 years, 11 months
dmesg spam after f26 -> f27 upgrade
by John Pilkington
I just upgraded my kde/f26 system to f27 using dnf. It seems to be
working well but dmesg has
<timestamp> rc rc1: error -5
repeated around 10 times per second. ISTR that when I first saw it it
was rc0:
Searching hasn't been much help. I use MythTV but not the lirc
infra-red remote-control features, and thought it might be lirc-related,
so installed lirc-disable-kernel-rc. But the messages continue. They
make it impossible to query dmesg for anything else.
/etc/rc.d includes various Kxxx files, and rc-local.service is 'static'
Suggestions please...
John P
5 years, 11 months
rp-pppoe
by Gary Hodder
Hi,
currently I am using a rp-pppoe with a router/modem in bridge mode on
adsl and all is working fine.
We are being forced to move to nbn, in our case fibre to the node.
The provider I am looking at uses vdsl, Protocol: IPoE (DHCP /
Automatic IP) VLAN: None/blank.
Will this work with rp-pppoe? If not is there a similar connection
software that will?
Thanks
Gary.
5 years, 11 months
dnf upgrade ran out of room on /boiu
by ToddAndMargo
Hi All,
FC 28
I used the default /boot size in Fedora 25, when I first
installed this:
# dnf upgrade
Error: Transaction check error:
installing package kernel-core-4.16.11-300.fc28.x86_64 needs 34MB on
the /boot filesystem
Error Summary
-------------
Disk Requirements:
At least 34MB more space needed on the /boot filesystem.
Does this mean I have to do the gparted thing and rick messing
everything up? Or is there a work around for this?
# df -kTP /boot
Filesystem Type 1024-blocks Used Available Capacity Mounted on
/dev/md126p1 ext4 487652 186803 271153 41% /boot
Many thanks,
-T
5 years, 11 months
vsftpd stopped allow logins after fc28 upgrade
by Todd Chester
Hi All,
After upgrading to FC 28 from FC 27, my customer's
vsftpd server stopped allowing ftp logins
from anywhere.
# systemctl status vsftpd
shows it running and happy (I tried stopping and
restarting several times)
There is no complaining in
# journalctl -f
when I attempt to make a connection.
I just get told something is wrong with the
username or password.
SELinux alerts are quiet.
What the heck ????
-T
5 years, 11 months
H.264 video broken after updating to Fedora 28
by Sam Varshavchik
After upgrading to Fedora 28, most of Youtube is broken in Firefox, claiming
lack of H.264 codec support.
Googling around, found this: https://fedoraproject.org/wiki/OpenH264
But none of the packages are currently available:
[root@thinkpad yum.repos.d]# dnf config-manager --set-enabled fedora-cisco-openh264
[root@thinkpad yum.repos.d]# dnf install gstreamer1-plugin-openh264 mozilla-openh264
Last metadata expiration check: 0:00:00 ago on Thu 26 Apr 2018 09:40:47 PM
EDT.
No match for argument: gstreamer1-plugin-openh264
No match for argument: mozilla-openh264
Error: Unable to find a match
Meanwhile, back on Fedora 27, H.264 video works fine in Firefox, without any
of this.
5 years, 11 months