But gdhadow did get updated:
grep rgm gshadow
wheel:::rgm
cdrom:::rgm
rgm:!::
More confusion. :(
On 05/29/2018 05:22 PM, Robert Moskowitz wrote:
On 05/29/2018 05:17 PM, Rex Dieter wrote:
> Robert Moskowitz wrote:
>
>> Seems the error is that my user needs to be added to group cdrom. This
>> was not the case in the past...
> That should not be required now either. Mind filing a bug?
I will work on getting into bugzilla. Also got the following. Perhaps
when I tried to add me to cdrom with the usrmod command from su..
SELinux is preventing pool from getattr access on the file /etc/gshadow.
***** Plugin catchall (100. confidence) suggests
**************************
If you believe that pool should be allowed getattr access on the
gshadow file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'pool' --raw | audit2allow -M my-pool
# semodule -X 300 -i my-pool.pp
Additional Information:
Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
Target Context system_u:object_r:shadow_t:s0
Target Objects /etc/gshadow [ file ]
Source pool
Source Path pool
Port <Unknown>
Host
lx121e.htt-consult.com
Source RPM Packages
Target RPM Packages setup-2.11.4-1.fc28.noarch
Policy RPM selinux-policy-3.14.1-29.fc28.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name
lx121e.htt-consult.com
Platform Linux
lx121e.htt-consult.com
4.16.11-300.fc28.x86_64 #1 SMP Tue May
22 18:29:09
UTC 2018 x86_64 x86_64
Alert Count 2
First Seen 2018-05-29 17:13:56 EDT
Last Seen 2018-05-29 17:13:56 EDT
Local ID b3355fe8-15e5-4422-9ccf-8794cd452416
Raw Audit Messages
type=AVC msg=audit(1527628436.92:843): avc: denied { getattr } for
pid=11867 comm="pool" path="/etc/gshadow" dev="sda3"
ino=140981
scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=0
Hash: pool,thumb_t,shadow_t,file,getattr
>
> -- Rex
>
>> On 05/29/2018 04:53 PM, Robert Moskowitz wrote:
>>> First time using K3b on this system. Plugged the DVD/RW in. Copied
>>> the CD no problem but the write failed:
>>>
>>> Devices
>>> -----------------------
>>> SONY DVD RW DRU-840A SS01 (/dev/sr0, CD-R, CD-RW, CD-ROM, DVD-ROM,
>>> DVD-R, DVD-RW, DVD-R DL, DVD+R, DVD+RW, DVD+R DL) [DVD-ROM, DVD-R
>>> Sequential, DVD-R Dual Layer Sequential, DVD-R Dual Layer Jump,
>>> DVD-RAM, DVD-RW Restricted Overwrite, DVD-RW Sequential, DVD+RW,
>>> DVD+R, DVD+R Dual Layer, CD-ROM, CD-R, CD-RW] [SAO, TAO, RAW,
>>> SAO/R96P, SAO/R96R, RAW/R16, RAW/R96P, RAW/R96R, Restricted Overwrite,
>>> Layer Jump] [%7]
>>>
>>> System
>>> -----------------------
>>> K3b Version: 17.12.3
>>> KDE Version: 5.44.0
>>> Qt Version: 5.10.1
>>> Kernel: 4.16.11-300.fc28.x86_64
>>>
>>> Used versions
>>> -----------------------
>>> cdrecord: 1.1.11
>>>
>>> cdrecord
>>> -----------------------
>>> /usr/bin/wodim: Operation not permitted. Warning: Cannot raise
>>> RLIMIT_MEMLOCK limits.
>>> scsidev: '/dev/sr0'
>>> devname: '/dev/sr0'
>>> scsibus: -2 target: -2 lun: -2
>>> /usr/bin/wodim: Cannot allocate memory.
>>> Cannot open SCSI driver!
>>> For possible targets try 'wodim --devices' or 'wodim
-scanbus'.
>>> For possible transport specifiers try 'wodim dev=help'.
>>> For IDE/ATAPI devices configuration, see the file
>>> README.ATAPI.setup from
>>> the wodim documentation.
>>> TOC Type: 0 = CD-DA
>>>
>>> cdrecord command:
>>> -----------------------
>>> /usr/bin/wodim -v gracetime=2 dev=/dev/sr0 speed=40 -raw96r
>>> driveropts=burnfree -text -useinfo -audio -shorttrack
>>> /home/rgm/Videos/k3bCdCopy0/Track01.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track02.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track03.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track04.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track05.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track06.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track07.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track08.wav
>>> /home/rgm/Videos/k3bCdCopy0/Track09.wav
> _______________________________________________
> users mailing list -- users(a)lists.fedoraproject.org
> To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...
_______________________________________________
users mailing list -- users(a)lists.fedoraproject.org
To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...