Bug 2175351
Summary: | SELinux is preventing plymouthd from 'map' accesses on the chr_file /dev/dri/card0. | ||||||||
---|---|---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Ian Laurie <nixuser> | ||||||
Component: | selinux-policy | Assignee: | Zdenek Pytela <zpytela> | ||||||
Status: | CLOSED DUPLICATE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||||
Severity: | unspecified | Docs Contact: | |||||||
Priority: | unspecified | ||||||||
Version: | rawhide | CC: | david, dwalsh, lvrabec, mmalik, olze, omosnacek, pkoncity, vmojzis, zpytela | ||||||
Target Milestone: | --- | ||||||||
Target Release: | --- | ||||||||
Hardware: | x86_64 | ||||||||
OS: | Unspecified | ||||||||
Whiteboard: | abrt_hash:d17a057bb35bc83b7aa9467ae076e8d4618223ebc72c7f61c79ef86251bf8925;VARIANT_ID=cinnamon; | ||||||||
Fixed In Version: | Doc Type: | If docs needed, set a value | |||||||
Doc Text: | Story Points: | --- | |||||||
Clone Of: | Environment: | ||||||||
Last Closed: | 2023-05-04 14:29:54 UTC | Type: | --- | ||||||
Regression: | --- | Mount Type: | --- | ||||||
Documentation: | --- | CRM: | |||||||
Verified Versions: | Category: | --- | |||||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||||
Cloudforms Team: | --- | Target Upstream Version: | |||||||
Embargoed: | |||||||||
Attachments: |
|
Description
Ian Laurie
2023-03-04 01:04:21 UTC
Created attachment 1947808 [details]
File: description
Created attachment 1947809 [details]
File: os_info
anything new here? i just found this log entry in journalctl because i have some problems with my second screen (which gets disabled after each reboot), in fedora 38 beta Apr 03 12:58:29 fedora setroubleshoot[6882]: SELinux hindert plymouthd daran, mit map-Zugriff auf chr_file /dev/dri/card0 zuzugreifen. ***** Plugin catchall (100. Wahrscheinlichkeit) schlägt vor ************** Wenn Sie denken, dass es plymouthd standardmäßig erlaubt sein sollte, map Zugriff auf card0 chr_file zu erhalten. Dann sie sollten dies als Fehler melden. Um diesen Zugriff zu erlauben, können Sie ein lokales Richtlinien-Modul erstellen. Ausführen zugriff jetzt erlauben, indem Sie die nachfolgenden Befehle ausführen: # ausearch -c 'plymouthd' --raw | audit2allow -M my-plymouthd # semodule -X 300 -i my-plymouthd.pp I'm also encountering this on Silverblue 38. In my case it's /dev/dri/card1. mai 03 10:16:54 fedora audit[607]: AVC avc: denied { map } for pid=607 comm="plymouthd" path="/dev/dri/card1" dev="devtmpfs" ino=583 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:dri_device_t:s0 tclass=chr_file permissive=0 I have an encrypted LUKS disk and instead of the password prompt to unlock the drive on boot, both my monitors are off. If I "blindly" type the password and hit Enter, the disk gets decrypted and the boot process continues. This worked fine on Silverblue 37. *** This bug has been marked as a duplicate of bug 2184900 *** |