But gdhadow did get updated:
grep rgm gshadow
wheel:::rgm
cdrom:::rgm
rgm:!::
More confusion. :(
On 05/29/2018 05:22 PM, Robert Moskowitz wrote:
>
>
> On 05/29/2018 05:17 PM, Rex Dieter wrote:
>> Robert Moskowitz wrote:
>>
>>> Seems the error is that my user needs to be added to group cdrom. This
>>> was not the case in the past...
>> That should not be required now either. Mind filing a bug?
>
> I will work on getting into bugzilla. Also got the following.
> Perhaps when I tried to add me to cdrom with the usrmod command from
> su..
>
> SELinux is preventing pool from getattr access on the file /etc/gshadow.
>
> ***** Plugin catchall (100. confidence) suggests
> **************************
>
> If you believe that pool should be allowed getattr access on the
> gshadow file by default.
> Then you should report this as a bug.
> You can generate a local policy module to allow this access.
> Do
> allow this access for now by executing:
> # ausearch -c 'pool' --raw | audit2allow -M my-pool
> # semodule -X 300 -i my-pool.pp
>
> Additional Information:
> Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
> Target Context system_u:object_r:shadow_t:s0
> Target Objects /etc/gshadow [ file ]
> Source pool
> Source Path pool
> Port <Unknown>
> Host
lx121e.htt-consult.com
> Source RPM Packages
> Target RPM Packages setup-2.11.4-1.fc28.noarch
> Policy RPM selinux-policy-3.14.1-29.fc28.noarch
> Selinux Enabled True
> Policy Type targeted
> Enforcing Mode Enforcing
> Host Name
lx121e.htt-consult.com
> Platform Linux
lx121e.htt-consult.com
> 4.16.11-300.fc28.x86_64 #1 SMP Tue May
> 22 18:29:09
> UTC 2018 x86_64 x86_64
> Alert Count 2
> First Seen 2018-05-29 17:13:56 EDT
> Last Seen 2018-05-29 17:13:56 EDT
> Local ID b3355fe8-15e5-4422-9ccf-8794cd452416
>
> Raw Audit Messages
> type=AVC msg=audit(1527628436.92:843): avc: denied { getattr } for
> pid=11867 comm="pool" path="/etc/gshadow" dev="sda3"
ino=140981
> scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
> tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=0
>
>
> Hash: pool,thumb_t,shadow_t,file,getattr
>
>>
>> -- Rex
>>
>>> On 05/29/2018 04:53 PM, Robert Moskowitz wrote:
>>>> First time using K3b on this system. Plugged the DVD/RW in. Copied
>>>> the CD no problem but the write failed:
>>>>
>>>> Devices
>>>> -----------------------
>>>> SONY DVD RW DRU-840A SS01 (/dev/sr0, CD-R, CD-RW, CD-ROM, DVD-ROM,
>>>> DVD-R, DVD-RW, DVD-R DL, DVD+R, DVD+RW, DVD+R DL) [DVD-ROM, DVD-R
>>>> Sequential, DVD-R Dual Layer Sequential, DVD-R Dual Layer Jump,
>>>> DVD-RAM, DVD-RW Restricted Overwrite, DVD-RW Sequential, DVD+RW,
>>>> DVD+R, DVD+R Dual Layer, CD-ROM, CD-R, CD-RW] [SAO, TAO, RAW,
>>>> SAO/R96P, SAO/R96R, RAW/R16, RAW/R96P, RAW/R96R, Restricted
>>>> Overwrite,
>>>> Layer Jump] [%7]
>>>>
>>>> System
>>>> -----------------------
>>>> K3b Version: 17.12.3
>>>> KDE Version: 5.44.0
>>>> Qt Version: 5.10.1
>>>> Kernel: 4.16.11-300.fc28.x86_64
>>>>
>>>> Used versions
>>>> -----------------------
>>>> cdrecord: 1.1.11
>>>>
>>>> cdrecord
>>>> -----------------------
>>>> /usr/bin/wodim: Operation not permitted. Warning: Cannot raise
>>>> RLIMIT_MEMLOCK limits.
>>>> scsidev: '/dev/sr0'
>>>> devname: '/dev/sr0'
>>>> scsibus: -2 target: -2 lun: -2
>>>> /usr/bin/wodim: Cannot allocate memory.
>>>> Cannot open SCSI driver!
>>>> For possible targets try 'wodim --devices' or 'wodim
-scanbus'.
>>>> For possible transport specifiers try 'wodim dev=help'.
>>>> For IDE/ATAPI devices configuration, see the file
>>>> README.ATAPI.setup from
>>>> the wodim documentation.
>>>> TOC Type: 0 = CD-DA
>>>>
>>>> cdrecord command:
>>>> -----------------------
>>>> /usr/bin/wodim -v gracetime=2 dev=/dev/sr0 speed=40 -raw96r
>>>> driveropts=burnfree -text -useinfo -audio -shorttrack
>>>> /home/rgm/Videos/k3bCdCopy0/Track01.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track02.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track03.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track04.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track05.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track06.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track07.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track08.wav
>>>> /home/rgm/Videos/k3bCdCopy0/Track09.wav
>> _______________________________________________
>> users mailing list -- users(a)lists.fedoraproject.org
>> To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
>> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
>> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
>> List Archives:
>>
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...
> _______________________________________________
> users mailing list -- users(a)lists.fedoraproject.org
> To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
> Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
> List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives:
>
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...
_______________________________________________
users mailing list -- users(a)lists.fedoraproject.org
To unsubscribe send an email to users-leave(a)lists.fedoraproject.org
Fedora Code of Conduct:
https://getfedora.org/code-of-conduct.html
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.o...