On 2020-03-05 21:02, François Patte wrote:
Le 05/03/2020 à 13:53, Ed Greshko a écrit :
> When the server fails to start with selinux enabled what do you get with
>
> ausearch -m AVC,USER_AVC -ts recent
>
[root@dipankar ~]# ausearch -m AVC,USER_AVC -ts recent
It is "odd" that you are getting so many but the one that is related to dictd
is
----
time->Thu Mar 5 13:59:45 2020
type=AVC msg=audit(1583413185.069:328): avc: denied { map } for
pid=8869 comm="dictd"
path="/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.index"
dev="dm-4" ino=402 scontext=system_u:system_r:dictd_t:s0
tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
----
sudo journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
Should output a list of selinux errors around that time, Find the one associated with
dictd and
run the
sealert -l XXXXXXX
command indicated.
--
The key to getting good answers is to ask good questions.