Le 05/03/2020 à 22:59, Samuel Sieb a écrit :
On 3/5/20 1:30 PM, François Patte wrote:
> Le 05/03/2020 à 22:00, Samuel Sieb a écrit :
>> What is the output of "ls -lZ /var/lib/rpm".
>
> total 126120
> -rw-r--r--. 1 root root unconfined_u:object_r:var_lib_t:s0 16687104 5
> mars 11:47 Basenames
Was this before or after the fixfiles? It should be:
-rw-r--r--. 1 root root unconfined_u:object_r:rpm_var_lib_t:s0 35680256
Mar 1 23:45 Basenames
-
Try "restorecon -rv /var/lib/rpm". If "ls -lZ /var/lib/rpm" shows
the
right permissions, then try causing the dictd error again and see if you
get an setroubleshootd message now.
Today, setroubleshoot condescended to open a window and tell me what to do:
1- SELinux interdit à dictd d'utiliser l'accès map sur le fichier
/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz.
ie.: SELinux forbids dictd to use map access on file /opt/...
Do: setsebool -P domain_can_mmap_files 1
2- For permanent access do:
semanage fcontext -a -t FILE_TYPE
'/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz'
where FILE_TYPE is one of the following value : abrt_helper_exec_t,
dictd_exec_t, dictd_var_lib_t, file_context_t, fonts_cache_t, fonts_t,
ld_so_cache_t, ld_so_t, lib_t, locale_t, nscd_var_run_t, passwd_file_t,
pkcs11_modules_conf_t, prelink_exec_t, sssd_public_t, textrel_shlib_t.
Well, I took my crystal ball and choose dictd_exec_t.....
Then I did:
restorecon -v
'/opt/share/stardict/dic/stardict-xmlittre-2.4.2/xmlittre.dict.dz'
Remark: <irony> it is easy to understand what to do!!! and what to
choose! </irony>
Why suddenly, selinux stopped to allow dictd to use map access to this
file? (I recall that I did not change anything to the dictd config)
How long this solution will last?
--
François Patte
UFR de mathématiques et informatique
Laboratoire CNRS MAP5, UMR 8145
Université Paris Descartes
45, rue des Saints Pères
F-75270 Paris Cedex 06
Tél. +33 (0)6 7892 5822
http://www.math-info.univ-paris5.fr/~patte
FSF
https://www.fsf.org/blogs/community/presenting-shoetool-happy-holidays-fr...