Bug 1729780
Summary: | SELinux is preventing gdk-pixbuf-thum from 'write' accesses on the file /home/.ecryptfs/mike/.Private/ECRYPTFS_FNEK_ENCRYPTED.FWZLF6QZ6-CFY-QRePhGJs5iGfrnxQ3xRolhzk-waKwjHy4dYIkbJ19kgk--/ECRYPTFS_FNEK_ENCRYPTED.FWZLF6QZ6-CFY-QRePhGJs5iGfrnxQ3xRolhiQqEJ... | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Michael <michael.scheiffler> |
Component: | selinux-policy | Assignee: | Lukas Vrabec <lvrabec> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 30 | CC: | dwalsh, lvrabec, mgrepl, mohamed.b.baig, plautrba, redhat, zpytela |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:00a3b30f918bc6718b7c798995805fbd67d576027252a5bac0f49e296081ba1f;VARIANT_ID=workstation; | ||
Fixed In Version: | Doc Type: | If docs needed, set a value | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2019-07-16 20:45:40 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Michael
2019-07-14 14:00:35 UTC
Happened after home directory migration with ecryptfs-migrate-home. Seems to be caused when thumbnails are being generated. However, thumbnails appear okay nevertheless... Used LUKS instead. Probably the better choice anyway... *** Bug 1729778 has been marked as a duplicate of this bug. *** *** Bug 1729779 has been marked as a duplicate of this bug. *** *** Bug 1729784 has been marked as a duplicate of this bug. *** Hi Michael, You need to label whole user home dir as ecryptfs_t and then allow following boolean to make it working: # semanage boolean --m --on use_ecryptfs_home_dirs This is not bug in fedora selinux-policy. Thanks, Lukas. Description of problem: Happened during boot. Version-Release number of selected component: selinux-policy-3.14.3-40.fc30.noarch Additional info: reporter: libreport-2.10.1 hashmarkername: setroubleshoot kernel: 5.1.17-300.fc30.x86_64 type: libreport *** Bug 1827418 has been marked as a duplicate of this bug. *** |