Bug 1583845

On 05/29/2018 05:31 PM, Robert Moskowitz wrote:
But gdhadow did get updated:

grep rgm gshadow
wheel:::rgm
cdrom:::rgm
rgm:!::


More confusion.  :(

On 05/29/2018 05:22 PM, Robert Moskowitz wrote:


On 05/29/2018 05:17 PM, Rex Dieter wrote:
Robert Moskowitz wrote:

Seems the error is that my user needs to be added to group cdrom. This
was not the case in the past...
That should not be required now either.  Mind filing a bug?

I will work on getting into bugzilla.  Also got the following. Perhaps when I tried to add me to cdrom with the usrmod command from su..

SELinux is preventing pool from getattr access on the file /etc/gshadow.

*****  Plugin catchall (100. confidence) suggests **************************

If you believe that pool should be allowed getattr access on the gshadow file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'pool' --raw | audit2allow -M my-pool
# semodule -X 300 -i my-pool.pp

Additional Information:
Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
Target Context                system_u:object_r:shadow_t:s0
Target Objects                /etc/gshadow [ file ]
Source                        pool
Source Path                   pool
Port                          <Unknown>
Host                          lx121e.htt-consult.com
Source RPM Packages
Target RPM Packages           setup-2.11.4-1.fc28.noarch
Policy RPM                    selinux-policy-3.14.1-29.fc28.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     lx121e.htt-consult.com
Platform                      Linux lx121e.htt-consult.com
                              4.16.11-300.fc28.x86_64 #1 SMP Tue May 22 18:29:09
                              UTC 2018 x86_64 x86_64
Alert Count                   2
First Seen                    2018-05-29 17:13:56 EDT
Last Seen                     2018-05-29 17:13:56 EDT
Local ID                      b3355fe8-15e5-4422-9ccf-8794cd452416

Raw Audit Messages
type=AVC msg=audit(1527628436.92:843): avc:  denied  { getattr } for  pid=11867 comm="pool" path="/etc/gshadow" dev="sda3" ino=140981 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=0


Hash: pool,thumb_t,shadow_t,file,getattr


-- Rex

On 05/29/2018 04:53 PM, Robert Moskowitz wrote:
First time using K3b on this system. Plugged the DVD/RW in.  Copied
the CD no problem but the write failed:

Devices
-----------------------
SONY DVD RW DRU-840A SS01 (/dev/sr0, CD-R, CD-RW, CD-ROM, DVD-ROM,
DVD-R, DVD-RW, DVD-R DL, DVD+R, DVD+RW, DVD+R DL) [DVD-ROM, DVD-R
Sequential, DVD-R Dual Layer Sequential, DVD-R Dual Layer Jump,
DVD-RAM, DVD-RW Restricted Overwrite, DVD-RW Sequential, DVD+RW,
DVD+R, DVD+R Dual Layer, CD-ROM, CD-R, CD-RW] [SAO, TAO, RAW,
SAO/R96P, SAO/R96R, RAW/R16, RAW/R96P, RAW/R96R, Restricted Overwrite,
Layer Jump] [%7]

System
-----------------------
K3b Version: 17.12.3
KDE Version: 5.44.0
Qt Version:  5.10.1
Kernel:      4.16.11-300.fc28.x86_64

Used versions
-----------------------
cdrecord: 1.1.11

cdrecord
-----------------------
/usr/bin/wodim: Operation not permitted. Warning: Cannot raise
RLIMIT_MEMLOCK limits.
scsidev: '/dev/sr0'
devname: '/dev/sr0'
scsibus: -2 target: -2 lun: -2
/usr/bin/wodim: Cannot allocate memory.
Cannot open SCSI driver!
For possible targets try 'wodim --devices' or 'wodim -scanbus'.
For possible transport specifiers try 'wodim dev=help'.
For IDE/ATAPI devices configuration, see the file README.ATAPI.setup from
the wodim documentation.
TOC Type: 0 = CD-DA

cdrecord command:
-----------------------
/usr/bin/wodim -v gracetime=2 dev=/dev/sr0 speed=40 -raw96r
driveropts=burnfree -text -useinfo -audio -shorttrack
/home/rgm/Videos/k3bCdCopy0/Track01.wav
/home/rgm/Videos/k3bCdCopy0/Track02.wav
/home/rgm/Videos/k3bCdCopy0/Track03.wav
/home/rgm/Videos/k3bCdCopy0/Track04.wav
/home/rgm/Videos/k3bCdCopy0/Track05.wav
/home/rgm/Videos/k3bCdCopy0/Track06.wav
/home/rgm/Videos/k3bCdCopy0/Track07.wav
/home/rgm/Videos/k3bCdCopy0/Track08.wav
/home/rgm/Videos/k3bCdCopy0/Track09.wav
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/IL3KXSIC6UJRFI6IH2OPCOHJWR73XXQ4/
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/ONNQEVWAKMEPAEQFQV2VGIYUC6L673AO/
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org/message/HSPARS6TDQXTJ4UNOZORHZW2KR7LGDML/