Attachment 1982717 Details for Bug 2230784 – File: description

File: description

description (text/plain), 2.72 KB, created by tongnguyenminhkhang21012020 on 2023-08-10 05:32:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: tongnguyenminhkhang21012020

Created: 2023-08-10 05:32:48 UTC

Size: 2.72 KB

patch

obsolete

>SELinux is preventing systemd-user-ru from 'write' accesses on the directory gnome-shell.
>
>*****  Plugin catchall_labels (83.8 confidence) suggests   *******************
>
>If you want to allow systemd-user-ru to have write access on the gnome-shell directory
>Then you need to change the label on gnome-shell
>Do
># semanage fcontext -a -t FILE_TYPE 'gnome-shell'
>where FILE_TYPE is one of the following: abrt_var_cache_t, cgroup_t, config_home_t, container_file_t, efivarfs_t, fusefs_t, gkeyringd_tmp_t, gstreamer_home_t, init_var_lib_t, init_var_run_t, krb5_host_rcache_t, mozilla_plugin_tmp_t, mozilla_plugin_tmpfs_t, session_dbusd_tmp_t, systemd_logind_inhibit_var_run_t, systemd_logind_sessions_t, systemd_logind_var_lib_t, systemd_logind_var_run_t, systemd_passwd_var_run_t, tmp_t, tmpfs_t, udev_rules_t, user_tmp_t, var_auth_t, var_run_t.
>Then execute:
>restorecon -v 'gnome-shell'
>
>
>*****  Plugin catchall (17.1 confidence) suggests   **************************
>
>If you believe that systemd-user-ru should be allowed write access on the gnome-shell directory by default.
>Then you should report this as a bug.
>You can generate a local policy module to allow this access.
>Do
>allow this access for now by executing:
># ausearch -c 'systemd-user-ru' --raw | audit2allow -M my-systemduserru
># semodule -X 300 -i my-systemduserru.pp
>
>Additional Information:
>Source Context                system_u:system_r:systemd_logind_t:s0
>Target Context                system_u:object_r:usr_t:s0
>Target Objects                gnome-shell [ dir ]
>Source                        systemd-user-ru
>Source Path                   systemd-user-ru
>Port                          <Unknown>
>Host                          (removed)
>Source RPM Packages           
>Target RPM Packages           
>SELinux Policy RPM            selinux-policy-targeted-38.22-1.fc38.noarch
>Local Policy RPM              selinux-policy-targeted-38.22-1.fc38.noarch
>Selinux Enabled               True
>Policy Type                   targeted
>Enforcing Mode                Enforcing
>Host Name                     (removed)
>Platform                      Linux (removed) 6.4.7-200.fc38.x86_64 #1 SMP
>                              PREEMPT_DYNAMIC Thu Jul 27 20:01:18 UTC 2023
>                              x86_64
>Alert Count                   32
>First Seen                    2023-08-10 12:27:11 +07
>Last Seen                     2023-08-10 12:27:11 +07
>Local ID                      d0c51852-b655-47a7-9224-70edcbc9be69
>
>Raw Audit Messages
>type=AVC msg=audit(1691645231.545:599): avc:  denied  { write } for  pid=42159 comm="systemd-user-ru" name="gnome-shell" dev="tmpfs" ino=4791 scontext=system_u:system_r:systemd_logind_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0
>
>
>Hash: systemd-user-ru,systemd_logind_t,usr_t,dir,write

Actions: View

Attachments on bug 2230784: 1982716 | 1982717