Bug 850809
Summary: | SELinux is preventing /sbin/setfiles from 'relabelto' accesses on the file /.config/Trolltech.conf. | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Sona Pochybova <spochybova> |
Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 16 | CC: | dominick.grift, dwalsh, mgrepl |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | x86_64 | ||
OS: | Unspecified | ||
Whiteboard: | abrt_hash:f92296f7b07467318bc974fc178b45a05dfcbb2a3220cd679b84099d4e019133 | ||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2012-08-22 13:29:24 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Sona Pochybova
2012-08-22 13:14:20 UTC
Are you trying to setup domain type for Trolltech.conf which is wrong? Just use restorecon -Rv PATHO/Trolltech.conf to fix labeling. (In reply to comment #1) > Are you trying to setup domain type for Trolltech.conf which is wrong? > > Just use restorecon -Rv PATHO/Trolltech.conf to fix labeling. I tried that, but I got the following: # restorecon -Rv /.config/Trolltech.conf restorecon reset /.config/Trolltech.conf context system_u:object_r:default_t:s0->system_u:object_r:chronyd_t:s0 restorecon set context /.config/Trolltech.conf->system_u:object_r:chronyd_t:s0 failed:'Permission denied' Ok, what does # semanage fcontext -l |grep chrony (In reply to comment #3) > Ok, what does > > # semanage fcontext -l |grep chrony /.config/Trolltech.conf all files system_u:object_r:chronyd_t:s0 /etc/chrony\.keys regular file system_u:object_r:chronyd_keys_t:s0 /etc/rc\.d/init\.d/chronyd regular file system_u:object_r:chronyd_initrc_exec_t:s0 /lib/systemd/system/chronyd.* regular file system_u:object_r:chronyd_unit_file_t:s0 /usr/sbin/chronyd regular file system_u:object_r:chronyd_exec_t:s0 /var/lib/chrony(/.*)? all files system_u:object_r:chronyd_var_lib_t:s0 /var/log/chrony(/.*)? all files system_u:object_r:chronyd_var_log_t:s0 /var/run/chronyd(/.*) all files system_u:object_r:chronyd_var_run_t:s0 /var/run/chronyd\.pid regular file system_u:object_r:chronyd_var_run_t:s0 /var/run/chronyd\.sock all files system_u:object_r:chronyd_var_run_t:s0 OK, this is a problem /.config/Trolltech.conf Execute # semanage fcontext -d -t chronyd_t "/.config/Trolltech.conf" Also /.config is KDE bug. Try to remove this directory. (In reply to comment #5) > OK, this is a problem > > /.config/Trolltech.conf > > Execute > > # semanage fcontext -d -t chronyd_t "/.config/Trolltech.conf" > > Also > > /.config > > is KDE bug. Try to remove this directory. Great, thank you, seems it is OK now :) |