Bug 442161
Summary: | SELinux is preventing tmpwatch (tmpreaper_t) "setattr" to ./pdftex (var_lib_t). | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | petrosyan |
Component: | texlive | Assignee: | Jindrich Novy <jnovy> |
Status: | CLOSED RAWHIDE | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | low | Docs Contact: | |
Priority: | low | ||
Version: | rawhide | CC: | covex, dwalsh, jkubin, jnovy, ma, mitr, pertusus, pknirsch, wwoods |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2008-04-29 04:43:26 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | |||
Bug Blocks: | 235706 |
Description
petrosyan
2008-04-12 08:15:57 UTC
Is tetex mv'ing files from /var/lib to /tmp which tmpwatch is then trying to manipulate? Or is it somehow telling tmpwatch to look at these files. I have not been able to figure out what is going on here. I do not understand that either, but it seems tmpwatch is for some reason scanning /var/lib/texmf. This is maybe a question for tmpwatch maintainer, then tetex... Yup, tetex puts mostly %ghosted stuff to /var/lib/texmf what is mostly fmt files for things like dvips/pdftex, etc. Hmmm, I'm not aware af any moves between /var/lib -> /tmp or vice versa. Maybe tmpwatch mistakenly looks for tmp files in the whole /var instead of /var/tmp ? This has nothing to do with /tmp, the TeX package explicitly asks tmpwatch to work on /var/lib/texmf: $ cat /etc/cron.daily/texlive.cron #!/bin/bash # Remove TeX fonts not used in 180 days /usr/sbin/tmpwatch 4320 /var/lib/texmf exit 0 The access should probably just be allowed, perhaps adding a new type for TeX fonts. The problem here is the postinstall of the tetex file. It is creating these files and directories in the post install, but never fixing the labeling. At the end of the postinstall you need to add a restorecon -R /var/lib/texmf Which will fix the labeling. Then tmpwatch will be able to manipulate the files. Another option would be to put this call into install-info * Tue Apr 01 2008 Jindrich Novy <jnovy> - 2007-18 - run restorecon in fonts subpackage to fix bad SELinux contexts Sure enough, %post in the -fonts package has: /sbin/restorecon -R %{_texmf_var}/ And /var/lib/texmf has tetex_data_t on all my rawhide systems. So.. is this bug fixed? Sure, just forgot to close it :) |