Le 05/03/2020 à 22:00, Samuel Sieb a écrit :
On 3/5/20 9:15 AM, François Patte wrote:
> Le 05/03/2020 à 14:16, Ed Greshko a écrit :
>> On 2020-03-05 21:02, François Patte wrote:
>>> Le 05/03/2020 à 13:53, Ed Greshko a écrit :
>>>> When the server fails to start with selinux enabled what do you get
>>>> with
>>>>
>>>> ausearch -m AVC,USER_AVC -ts recent
>>>>
>>> [root@dipankar ~]# ausearch -m AVC,USER_AVC -ts recent
>>
>> It is "odd" that you are getting so many but the one that is related
>> to dictd is
>>
>>> ----
>>> time->Thu Mar 5 13:59:45 2020
>>> type=AVC msg=audit(1583413185.069:328): avc: denied { map } for
>>> pid=8869 comm="dictd"
>>>
path="/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.index"
>>> dev="dm-4" ino=402 scontext=system_u:system_r:dictd_t:s0
>>> tcontext=unconfined_u:object_r:usr_t:s0 tclass=file permissive=0
>>> ----
>>>
>>
>> sudo journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
>
> journalctl -t setroubleshoot --since="2020-03-05 13:59:4"
> Journal file
>
/var/log/journal/bd9a117e29a44dd4b335896e866a41d2/system(a)0005995d04fbac9f-d1196d9ceef66b92.journal~
>
> is truncated, ignoring file.
> -- Logs begin at Sun 2019-10-20 16:16:14 CEST, end at Thu 2020-03-05
> 17:59:01 CET. --
> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to get filesystem
> list from rpm
> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
> info for /opt/share/stardict/dic/stardict->
> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
> info for selinux-policy
> mars 05 13:59:48 dipankar setroubleshoot[8876]: failed to retrieve rpm
> info for selinux-policy
From your other email, there are these messages:
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.605:331): avc: denied { read } for
> pid=8876 comm="setroubleshootd" name="Packages"
dev="dm-2" ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
> ----
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.841:332): avc: denied { read } for
> pid=8878 comm="rpm" name="Packages" dev="dm-2"
ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
> ----
> time->Thu Mar 5 13:59:48 2020
> type=AVC msg=audit(1583413188.842:333): avc: denied { read } for
> pid=8878 comm="rpm" name="Packages" dev="dm-2"
ino=655505
> scontext=system_u:system_r:setroubleshootd_t:s0
> tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
setroubleshootd is not able to determine the package for the file, so
it's not able to give the fix message.
What is the output of "ls -lZ /var/lib/rpm".
total 126120
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16687104 5
mars 11:47 Basenames
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 20480 16
févr. 10:57 Conflictname
-rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 311296 5
mars 22:22 __db.001
-rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 90112 5
mars 22:22 __db.002
-rw-r--r--. 1 root root system_u:object_r:var_lib_t:s0 1318912 5
mars 22:22 __db.003
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 6496256 5
mars 11:47 Dirnames
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 3
janv. 18:34 Enhancename
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 3
janv. 18:34 Filetriggername
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 36864 5
mars 11:47 Group
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 40960 5
mars 11:47 Installtid
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 151552 5
mars 11:47 Name
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 98304 5
mars 11:47 Obsoletename
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 100007936 5
mars 11:47 Packages
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 2306048 5
mars 11:47 Providename
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 20480 5
mars 11:47 Recommendname
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 1179648 5
mars 11:47 Requirename
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 299008 5
mars 11:47 Sha1header
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 167936 5
mars 11:47 Sigmd5
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 16
févr. 10:57 Suggestname
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 15
févr. 19:25 Supplementname
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 8192 1
févr. 22:14 Transfiletriggername
-rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16384 9
févr. 11:42 Triggername
--
François Patte
UFR de mathématiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Université Paris Descartes
45, rue des Saints Pères
F-75270 Paris Cedex 06
Tél. +33 (0)6 7892 5822
http://www.math-info.univ-paris5.fr/~patte
FSF
https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-fr...