On 05/29/2018 05:17 PM, Rex Dieter wrote:
Robert Moskowitz wrote:
> Seems the error is that my user needs to be added to group cdrom. This
> was not the case in the past...
That should not be required now either. Mind filing a bug?
I will work on getting into bugzilla. Also got the following. Perhaps
when I tried to add me to cdrom with the usrmod command from su..
SELinux is preventing pool from getattr access on the file /etc/gshadow.
***** Plugin catchall (100. confidence) suggests **************************
If you believe that pool should be allowed getattr access on the gshadow
file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'pool' --raw | audit2allow -M my-pool
# semodule -X 300 -i my-pool.pp
Additional Information:
Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
Target Context system_u:object_r:shadow_t:s0
Target Objects /etc/gshadow [ file ]
Source pool
Source Path pool
Port <Unknown>
Host
lx121e.htt-consult.com
Source RPM Packages
Target RPM Packages setup-2.11.4-1.fc28.noarch
Policy RPM selinux-policy-3.14.1-29.fc28.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name
lx121e.htt-consult.com
Platform Linux
lx121e.htt-consult.com
4.16.11-300.fc28.x86_64 #1 SMP Tue May 22
18:29:09
UTC 2018 x86_64 x86_64
Alert Count 2
First Seen 2018-05-29 17:13:56 EDT
Last Seen 2018-05-29 17:13:56 EDT
Local ID b3355fe8-15e5-4422-9ccf-8794cd452416
Raw Audit Messages
type=AVC msg=audit(1527628436.92:843): avc: denied { getattr } for
pid=11867 comm="pool" path="/etc/gshadow" dev="sda3"
ino=140981
scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=0
Hash: pool,thumb_t,shadow_t,file,getattr
-- Rex
> On 05/29/2018 04:53 PM, Robert Moskowitz wrote:
>> First time using K3b on this system. Plugged the DVD/RW in. Copied
>> the CD no problem but the write failed:
>>
>> Devices
>> -----------------------
>> SONY DVD RW DRU-840A SS01 (/dev/sr0, CD-R, CD-RW, CD-ROM, DVD-ROM,
>> DVD-R, DVD-RW, DVD-R DL, DVD+R, DVD+RW, DVD+R DL) [DVD-ROM, DVD-R
>> Sequential, DVD-R Dual Layer Sequential, DVD-R Dual Layer Jump,
>> DVD-RAM, DVD-RW Restricted Overwrite, DVD-RW Sequential, DVD+RW,
>> DVD+R, DVD+R Dual Layer, CD-ROM, CD-R, CD-RW] [SAO, TAO, RAW,
>> SAO/R96P, SAO/R96R, RAW/R16, RAW/R96P, RAW/R96R, Restricted Overwrite,
>> Layer Jump] [%7]
>>
>> System
>> -----------------------
>> K3b Version: 17.12.3
>> KDE Version: 5.44.0
>> Qt Version: 5.10.1
>> Kernel: 4.16.11-300.fc28.x86_64
>>
>> Used versions
>> -----------------------
>> cdrecord: 1.1.11
>>
>> cdrecord
>> -----------------------
>> /usr/bin/wodim: Operation not permitted. Warning: Cannot raise
>> RLIMIT_MEMLOCK limits.
>> scsidev: '/dev/sr0'
>> devname: '/dev/sr0'
>> scsibus: -2 target: -2 lun: -2
>> /usr/bin/wodim: Cannot allocate memory.
>> Cannot open SCSI driver!
>> For possible targets try 'wodim --devices' or 'wodim -scanbus'.
>> For possible transport specifiers try 'wodim dev=help'.
>> For IDE/ATAPI devices configuration, see the file README.ATAPI.setup from
>> the wodim documentation.
>> TOC Type: 0 = CD-DA
>>
>> cdrecord command:
>> -----------------------
>> /usr/bin/wodim -v gracetime=2 dev=/dev/sr0 speed=40 -raw96r
>> driveropts=burnfree -text -useinfo -audio -shorttrack
>> /home/rgm/Videos/k3bCdCopy0/Track01.wav
>> /home/rgm/Videos/k3bCdCopy0/Track02.wav
>> /home/rgm/Videos/k3bCdCopy0/Track03.wav
>> /home/rgm/Videos/k3bCdCopy0/Track04.wav
>> /home/rgm/Videos/k3bCdCopy0/Track05.wav
>> /home/rgm/Videos/k3bCdCopy0/Track06.wav
>> /home/rgm/Videos/k3bCdCopy0/Track07.wav
>> /home/rgm/Videos/k3bCdCopy0/Track08.wav
>> /home/rgm/Videos/k3bCdCopy0/Track09.wav
_______________________________________________
users mailing list -- users(a)lists.fedoraproject.org
To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...