Fedora Account System
Red Hat Associate
Red Hat Customer
Created attachment 1868460 [details] Raw AVCs logging in with permissive mode Description of problem: Fully updated fedora-36, endless cycle of gnome login prompting for password. Successful login in permissive mode. Here is what the AVCs tell me: [tbl@localhost ~]$ sudo ausearch -m avc -ts today | audit2allow Attaching raw AVCs. #============= kernel_t ============== allow kernel_t unconfined_t:process transition; #============= unconfined_t ============== allow unconfined_t lib_t:file entrypoint; allow unconfined_t xdm_unconfined_exec_t:file entrypoint; [tbl@localhost ~]$ Version-Release number of selected component (if applicable): selinux-policy-targeted-36.5-1.fc36.noarch How reproducible: Every time.... Steps to Reproduce: 1. Boot 2. enter password at prompt 3. Rinse and repeat ;-) Actual results: Login fails Expected results: Login works Additional info:
Arghhh..... I noticed that /etc/ld_so_cache was labelled default_t, so I did a 'restorecon /etc/ld.so_cache' and it got relabelled to ld_so_cache_t. On a whim, I ran 'restorecon -v -R /etc' and many many files got relabelled. I thought that perhaps the relabelling on system-upgrade somehow failed, so I did 'restorecon -v -R /' and scads of files got relabelled. I then rebooted in enforcing mode and gnome login worked. So this must have been due to the (massive?) mislabeling. [tbl@localhost ~]$ sudo ausearch -m avc -ts boot ---- time->Sat Mar 26 07:56:57 2022 type=AVC msg=audit(1648306617.473:209): avc: denied { mac_admin } for pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 ---- time->Sat Mar 26 07:56:57 2022 type=AVC msg=audit(1648306617.495:211): avc: denied { mac_admin } for pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 [tbl@localhost ~]$ Not sure what to do with this BZ. Feel free to close, not a bug, ...
BTW, I am seeing this: [tbl@localhost ~]$ sudo restorecon -v -R / restorecon: Could not set context for /usr/lib/systemd/system/snapd.autoimport.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/docker.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/snapd.failure.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/usbguard.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/snapd.seeded.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/snapd.socket: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/snapd.service: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/docker.socket: Invalid argument restorecon: Could not set context for /usr/lib/systemd/system/containerd.service: Invalid argument restorecon: Could not set context for /usr/sbin/tpm2-abrmd: Invalid argument restorecon: Could not set context for /usr/sbin/usbguard-daemon: Invalid argument restorecon: Could not set context for /usr/bin/containerd-shim-runc-v1: Invalid argument restorecon: Could not set context for /usr/bin/dockerd: Invalid argument restorecon: Could not set context for /usr/bin/runc: Invalid argument restorecon: Could not set context for /usr/bin/containerd-stress: Invalid argument restorecon: Could not set context for /usr/bin/docker: Invalid argument restorecon: Could not set context for /usr/bin/containerd-shim: Invalid argument restorecon: Could not set context for /usr/bin/swtpm: Invalid argument restorecon: Could not set context for /usr/bin/crun: Invalid argument restorecon: Could not set context for /usr/bin/snap: Invalid argument restorecon: Could not set context for /usr/bin/containerd-shim-runc-v2: Invalid argument restorecon: Could not set context for /usr/bin/containerd: Invalid argument restorecon: Could not set context for /usr/libexec/docker/docker-proxy: Invalid argument restorecon: Could not set context for /usr/libexec/docker/rhel-push-plugin: Invalid argument restorecon: Could not set context for /usr/libexec/docker/docker-init: Invalid argument restorecon: Could not set context for /usr/libexec/flatpak-system-helper: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/etelpmoc.sh: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-discard-ns: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-mgmt: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-gdbserver-shim: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-seccomp: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-mgmt-selinux: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-gdb-shim: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-device-helper: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snapctl: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-exec: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-failure: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/info: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-confine: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/complete.sh: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snap-update-ns: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snapd.run-from-snap: Invalid argument restorecon: Could not set context for /usr/libexec/snapd/snapd: Invalid argument /home/tbl/Downloads/turbotax2021.iso not reset as customized by admin to system_u:object_r:virt_content_t:s0 /home/tbl/Downloads/Win10_1903_V1_English_x64.iso not reset as customized by admin to system_u:object_r:virt_content_t:s0 restorecon: Could not set context for /home/tbl/snap: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.last_revision: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.themes: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/user-dirs.locale: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/fontconfig: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/fontconfig/fonts.conf: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/user-dirs.dirs: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/gtk-2.0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/gtk-2.0/gtkfilechooser.ini: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/ibus: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/ibus/bus: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/dconf: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/dconf/user: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/user-dirs.locale.md5sum: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/user-dirs.dirs.md5sum: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/blob_storage: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/blob_storage/b3bd9e8e-63ca-439a-a2db-aa46c5eef784: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage/MANIFEST-000001: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage/LOG: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage/000003.log: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage/CURRENT: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Session Storage/LOCK: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Network Persistent State: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cookies-journal: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/4ed45226458c8118_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/0eaa5079646e3ea1_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2f32de11fa8f991a_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/ae7551617db048d0_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/d95907685baa6d0c_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/b5adc2840d807b83_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c66cf85717f70347_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/f32c1d2b43a202c8_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/b6d3fda2ad173da7_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/85ca1084e44f0c7d_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/3c0a779067b46cfd_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/index-dir: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/index-dir/the-real-index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a8e327506f72f5bb_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c33e6c68bbedc1ce_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/7115d35262a342f9_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/5bd35353eaeb1bbf_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/4f1edc294492a92d_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/fa718a74248f3aac_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/3736a3ce7b250a25_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/7656879c365986c3_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/566ffb4d80379feb_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c22f8784d4723be8_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/90f40cbd5069d517_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/46e746a7a1392e46_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a7b1bdb99995d3ce_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/e0947db21978b380_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c761f56367779542_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c1d33634658a5959_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/d707e8508fc0ff53_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/749f3b96a6c74ec0_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/df81e601ec800622_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/474f147f9e71b3be_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/61c12cba56bbd3d7_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/6d48b2fb7348d48f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/65fbe2c1944eb55b_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/8a272c11e09b34c2_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/f5e4b36b1abe3a23_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9db0428f34cccc1b_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2b498a8a874277d4_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2a3a1057f7442c6e_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/4a22ccd585a53eeb_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9a8cd0add8e714af_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/e8ff15635a25c163_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/547f17fa095a9a91_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/139435cfe4d528ab_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/07b98755d4236995_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/446d783da81136dd_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/92d1823b5b8948c8_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/6fc2658937429a46_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/349dbe1f7a142b7f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/840a331f219f54df_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/4bba779b6ca5c97f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/588c0635bf2dcd5a_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/81d45f77c061b3da_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/87030fbadbf221bf_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/74727d70d0590cd0_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/4a3f98003cf1d80a_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/b91d0d9ccf963e31_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/dfa0b20b241e734f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/cdf95f51846493d1_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/005981bce46927c6_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9c73cadac78ddb8a_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/09d88a5739774ca0_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/550eba0b0deee216_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/828d5631d88a35c3_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2c17f172a9e2301e_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/d45079a016345429_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/43c7751492b5b3a9_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/cad17e11b8b90b50_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/60efd2fc54503405_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a2a2a082602a5895_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/41b1934be331f49d_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9658bef21a3dd2e7_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/be1a42f40d3864a0_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/61710356c919ccaf_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9c8d9ec51517364d_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/db0433a4e1eee674_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2e23edf563b9b017_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/96848ed392d7b005_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/851ae5bcc4df24fa_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/6b949536c876357e_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/200f7ba76c23a8fc_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/455d29ded4645900_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/2bcf80982592c12a_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/aa408de935109cb5_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c99c6c683c6b3983_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/12aed5ad1202cb62_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/56fea4e05e799fc3_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/27828080a6130f7f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/03422207c29bde38_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/5671c2a847b3286f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/e63f1096f80f68e8_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/74c3672200b79253_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/8df8eb02589ad396_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/871d46d1cd78c808_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/8b9b4cb36b7e97d2_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/f95a93ab9c84991f_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/3680669ce241bd2c_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/9e2a285983d05739_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/421df75f56fdaa6b_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/66cf5e5d1ae38824_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/dc97aeb83f025914_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/08c35c22a0ff87e4_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/b2266e9588dcd135_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/77435aa00c0efebb_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/1a511f25cb7879c9_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a18af9ca10811b0c_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/bb95739adca947fd_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/53809c5ba89052f3_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/019089a641578afb_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/29b8a700370ef954_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/244ae86e9ea4a885_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/3dd182080325aa7e_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/3d1ced9756a92199_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/0de9697fea2f097c_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a3a48d4cf84d5272_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/c46145e090eaf128_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/d36a4474d9bbd27c_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/448985f517edca01_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/cd9d88d50b9b9cd2_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/a8eca41a7f722b30_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cache/658a6bb46e2ebc7b_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/TransportSecurity: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Code Cache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Code Cache/js: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Code Cache/js/index-dir: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Code Cache/js/index-dir/the-real-index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Code Cache/js/index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/QuotaManager-journal: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Cookies: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/QuotaManager: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/.usage: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000078: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000027: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000011: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000066: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000054: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000086: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000033: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000035: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000002: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000031: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000026: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000009: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000081: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000082: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000029: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000062: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000083: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000005: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000051: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000044: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000074: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000085: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000071: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000068: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000080: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000045: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000024: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000023: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000020: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000070: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000090: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000084: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000010: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000034: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000072: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000063: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000013: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000089: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000017: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000012: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000019: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000018: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000021: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000079: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000040: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000048: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000041: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000001: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000006: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000092: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000069: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000015: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000076: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000060: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000039: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000052: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000073: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000088: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000016: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000059: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000075: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000000: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000053: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000007: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000032: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000030: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000025: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000098: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000057: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000093: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000049: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000008: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000096: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000091: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000046: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000003: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000038: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000022: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000094: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000037: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000004: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000055: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000064: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000028: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000099: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000042: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000047: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000095: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000014: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000043: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000061: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000050: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000056: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000067: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000077: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000036: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000097: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000065: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000058: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/00/00000087: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000114: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000105: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000110: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000112: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000111: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000118: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000106: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000115: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000107: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000108: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000113: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000102: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000109: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000103: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000117: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000101: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000104: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000116: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000100: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/01/00000119: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths/MANIFEST-000001: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths/LOG: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths/000003.log: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths/CURRENT: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/000/p/Paths/LOCK: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/MANIFEST-000001: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/LOG: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/000003.log: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/CURRENT: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/LOCK: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/File System/Origins/LOG.old: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache/data_1: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache/index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache/data_0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache/data_3: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/GPUCache/data_2: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb/MANIFEST-000001: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb/LOG: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb/000003.log: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb/CURRENT: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/Local Storage/leveldb/LOCK: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/databases: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/databases/Databases.db: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/Authy Desktop/databases/Databases.db-journal: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/gtk-3.0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/gtk-3.0/settings.ini: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.config/gtk-3.0/bookmarks: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/glib-2.0: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/glib-2.0/schemas: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Suru: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Suru/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Breeze_Snow: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Breeze_Snow/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Breeze_Snow/cursors: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/breeze_cursors: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/breeze_cursors/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/breeze_cursors/cursors: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/72x72: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/36x36: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/96x96: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/512x512: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/symbolic: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/256x256: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/128x128: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/22x22: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/192x192: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/48x48: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/16x16: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/64x64: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/scalable: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/24x24: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/hicolor/32x32: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/communitheme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/communitheme/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Papirus-Adapta-Nokto-Maia: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Papirus-Adapta-Nokto-Maia/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-Black: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-Black/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-Black/cursor.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-Black/cursors: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-White: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-White/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-White/cursor.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/DMZ-White/cursors: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Papirus-Adapta-Maia: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/icons/Papirus-Adapta-Maia/index.theme: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.local/share/themes: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.pki: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.pki/nssdb: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.pki/nssdb/key4.db: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.pki/nssdb/pkcs11.txt: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/5/.pki/nssdb/cert9.db: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/1a16132f-d90e-42ce-aeb9-72abbc4ba257-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/a6c4f8c7-4b06-4c2f-ad70-ebdc732f9b32-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/305dc5f8-e794-4e47-9d8d-50f16bd3c3cb-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/cf03353a-12b2-4dd2-84e2-3b2c23bc81d8-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/221930ae9526a9cb8049af2916f03412-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/b06bea72-b799-4cfb-8bad-2dde6415e201-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/6ee3103884cce7b2fe6f32eba9089175-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/0e290561-6ff3-41b8-9061-073ef19db100-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/6e5a5126-ef3c-4aa5-85ce-ea2a9b678341-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/57875e18-db3e-4434-97a7-cd454efea2d8-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/e4a69545-02e9-4608-bceb-22ed86928897-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/9e4d01ee-ff1b-49f4-ba5f-2fd3ae4ee616-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/ae050cdc-8a8e-498f-979e-a0d687d00342-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/67790001-3208-41e7-ae71-874f9552c03a-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/9b175c5e-1c71-41d2-8f00-97500517f8d0-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/4ead2295-7813-4a2e-903b-a54a814f215c-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/4c599c202bc5c08e2d34565a40eac3b2-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/e6b21118-9dee-4b17-ae6b-800a2d8ab73e-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/CACHEDIR.TAG: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/835fc7b2-c47c-4325-8e79-6eb6266deacf-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/da66dd08-9188-4100-8343-fcc4f5e95830-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/427eb62078a821f08aa6ed364f2467bf-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/46ff4b75-f6a3-478c-ba5a-e6f40a4a797b-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/131ab5cc1583381c4f7ce0194912c56d-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/90a3b8bb-3c5b-4678-81cb-0d567ec5e3f8-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/bd4fbf7b-a581-4634-9a1a-e4e0f19b736b-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/9eb05db583e8074afdcaa8f7e2e89a66-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/f12c89acaa8c613b766b203fe446f035-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/96e9beb5-7597-4f35-86c9-e76964bcb2e5-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/7bbebb41f246c24642924bd8585d5345-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/84122f42ab51e0fd7187e85d0e1ff533-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/fc1395ed-b3ca-4970-b498-b532859322a3-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/5e61abaf-bef6-4fb5-abfe-ed6dd19078a2-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/33dec320-e1a3-4c04-b6ed-26dec3a73291-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/39b4a967-caf8-4885-b8ef-985c3efe5ec9-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/04a707d7-3152-4ff9-83ec-67c4584c04e0-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/1179cfdd-64e3-42f6-a534-d5585be89456-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/37d45b71-4a87-48b8-b5b5-7d400b73e665-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/0596f056-e46d-4e0c-ba9c-65b0f4795b9e-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/0909d485-3948-4bf7-80a1-6d4b45ae1876-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/6d003f12-9206-46a2-933b-b3d0dee0f74c-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/6b01e2f97f60100bc063943722a7402a-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/6e59ae42-7f93-4620-9ae6-15fb9aa87c5e-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/e4889474-5d9e-4747-ae81-36d55aa36215-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/e549de67-87b7-4188-b47d-b2df24883e12-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/9b5bf53b-bfbc-42b3-a963-194b89ac8f5f-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/5427ecec-487a-47a2-b973-42bb1ab2e455-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/092f3daa-6f8f-4774-8762-abe9869ae578-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/12d0fa3d-4eab-4994-bd58-2bfe2d12fab9-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/512894a3-3bd5-4c7d-9d56-fe3fa7bd5697-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/b7818d22-76c5-4c12-89cb-be33aa0ffc73-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/d8a0a827-bb83-466f-b91f-0286d688f54d-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/3668af07-fd49-438d-b0ca-cf871aa780a5-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/85f64436-b190-468d-aced-626708e0c05f-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/46020014-8072-4475-be0a-47a290e52797-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/cf759820c416606818fc74e5e9991313-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/28168f92-8e5a-4ead-a3b3-3bd293f492d2-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/fontconfig/f08fbdb5-bc2b-407f-8619-4ed3dae3b455-le64.cache-7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/gdk-pixbuf-loaders.cache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/e8: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/e8/bd3b44fa50e828f2ddd314debb25e9a57a9743: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/e8/89b42263d5deeffbcd58ded37365a395b52acb: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/5e: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/5e/12e2b4c7336f93637aff6b5ff1f8869089dc8d: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/00: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/00/ba203143ba3e70a5412d0d9a4d670e64e4117c: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/00/f1c48454559f1c0cabfb6c145021407bf1a672: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/a7: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/a7/a016831bba232c6db3e2f67b86fa9fa3c9a490: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/index: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/7a: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/7a/bf71086204351fa57c136b8f08a19bc3f353e8: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/1b: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/1b/e44fbb307861b767a57a057c2d125d73cafada: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/d6: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/d6/070703056a5f9477b883e2263d77daa8eb37ef: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/1d: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/1d/4a8ee02204740be9a9c6d70fdb2c316fd584b4: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/ce: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/ce/769e811eecac78331c7d5655d36faf2547fa6c: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/36: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/36/406065614053050f4e536312cead5175562b75: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/01: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/01/821d496ac413e17e35931cbd3608065948dd64: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/3f: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/3f/e2781f7203e1d91a677dfed2b3c1618da0ccdb: Invalid argument restorecon: Could not set context for /home/tbl/snap/authy/common/.cache/mesa_shader_cache/82: Invalid argument ... Got this when running in enforcing mode.
[tbl@localhost ~]$ sudo setenforce 0 [tbl@localhost ~]$ sudo dnf reinstall selinux-policy selinux-policy-targeted Fedora 36 - x86_64 - VirtualBox 12 kB/s | 6.9 kB 00:00 Errors during downloading metadata for repository 'virtualbox': - Status code: 404 for http://download.virtualbox.org/virtualbox/rpm/fedora/36/x86_64/repodata/repomd.xml (IP: 184.27.28.33) Error: Failed to download metadata for repo 'virtualbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried Ignoring repositories: virtualbox Last metadata expiration check: 0:07:59 ago on Sat 26 Mar 2022 09:05:20 AM PDT. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Reinstalling: selinux-policy noarch 36.5-1.fc36 updates-testing 71 k selinux-policy-targeted noarch 36.5-1.fc36 updates-testing 6.3 M Transaction Summary ================================================================================ Total download size: 6.4 M Installed size: 17 M Is this ok [y/N]: y Downloading Packages: (1/2): selinux-policy-36.5-1.fc36.noarch.rpm 192 kB/s | 71 kB 00:00 (2/2): selinux-policy-targeted-36.5-1.fc36.noar 5.9 MB/s | 6.3 MB 00:01 -------------------------------------------------------------------------------- Total 4.9 MB/s | 6.4 MB 00:01 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 1/1 Preparing : 1/1 Reinstalling : selinux-policy-36.5-1.fc36.noarch 1/4 Running scriptlet: selinux-policy-36.5-1.fc36.noarch 1/4 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST /usr/sbin/semodule: Failed! Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 2/4 Reinstalling : selinux-policy-targeted-36.5-1.fc36.noarch 2/4 Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 2/4 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST /usr/sbin/semodule: Failed! uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli Running scriptlet: selinux-policy-36.5-1.fc36.noarch 3/4 Cleanup : selinux-policy-36.5-1.fc36.noarch 3/4 Running scriptlet: selinux-policy-36.5-1.fc36.noarch 3/4 Cleanup : selinux-policy-targeted-36.5-1.fc36.noarch 4/4 Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 4/4 Verifying : selinux-policy-36.5-1.fc36.noarch 1/4 Verifying : selinux-policy-36.5-1.fc36.noarch 2/4 Verifying : selinux-policy-targeted-36.5-1.fc36.noarch 3/4 Verifying : selinux-policy-targeted-36.5-1.fc36.noarch 4/4 You should restart: * Some applications using: sudo systemctl restart libvirtd sudo systemctl restart systemd-logind sudo systemctl restart systemd-resolved sudo systemctl restart systemd-udevd * These applications manually: (sd-pam) Additionally, there are: - 1 processes requiring reboot For more information run: sudo tracer -iat 1648311198.0078108 Reinstalled: selinux-policy-36.5-1.fc36.noarch selinux-policy-targeted-36.5-1.fc36.noarch Complete!
See this on fresh enforcing boot: [tbl@localhost ~]$ sudo ausearch -m avc -ts boot ---- time->Sun Mar 27 06:49:38 2022 type=AVC msg=audit(1648388978.622:208): avc: denied { mac_admin } for pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 ---- time->Sun Mar 27 06:49:38 2022 type=AVC msg=audit(1648388978.632:210): avc: denied { mac_admin } for pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 ---- time->Sun Mar 27 06:51:27 2022 type=AVC msg=audit(1648389087.327:434): avc: denied { execute } for pid=4323 comm="(m-helper)" name="flatpak-system-helper" dev="dm-1" ino=2538818 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0" ---- time->Sun Mar 27 06:51:27 2022 type=AVC msg=audit(1648389087.342:436): avc: denied { execute } for pid=4324 comm="(m-helper)" name="flatpak-system-helper" dev="dm-1" ino=2538818 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 trawcon="system_u:object_r:flatpak_helper_exec_t:s0" [tbl@localhost ~]$ ls -lZ /usr/libexec/flatpak-system-helper -rwxr-xr-x. 1 root root system_u:object_r:unlabeled_t:s0 646712 Mar 17 15:45 /usr/libexec/flatpak-system-helper [tbl@localhost ~]$ sudo restorecon -v $_ restorecon: Could not set context for /usr/libexec/flatpak-system-helper: Invalid argument [tbl@localhost ~]$
(In reply to Tom London from comment #4) > See this on fresh enforcing boot: > > [tbl@localhost ~]$ sudo ausearch -m avc -ts boot > ---- > time->Sun Mar 27 06:49:38 2022 > type=AVC msg=audit(1648388978.622:208): avc: denied { mac_admin } for > pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 > tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 > ---- > time->Sun Mar 27 06:49:38 2022 > type=AVC msg=audit(1648388978.632:210): avc: denied { mac_admin } for > pid=1 comm="systemd" capability=33 scontext=system_u:system_r:init_t:s0 > tcontext=system_u:system_r:init_t:s0 tclass=capability2 permissive=0 > ---- > time->Sun Mar 27 06:51:27 2022 > type=AVC msg=audit(1648389087.327:434): avc: denied { execute } for > pid=4323 comm="(m-helper)" name="flatpak-system-helper" dev="dm-1" > ino=2538818 scontext=system_u:system_r:init_t:s0 > tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 > trawcon="system_u:object_r:flatpak_helper_exec_t:s0" > ---- > time->Sun Mar 27 06:51:27 2022 > type=AVC msg=audit(1648389087.342:436): avc: denied { execute } for > pid=4324 comm="(m-helper)" name="flatpak-system-helper" dev="dm-1" > ino=2538818 scontext=system_u:system_r:init_t:s0 > tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0 > trawcon="system_u:object_r:flatpak_helper_exec_t:s0" > [tbl@localhost ~]$ ls -lZ /usr/libexec/flatpak-system-helper > -rwxr-xr-x. 1 root root system_u:object_r:unlabeled_t:s0 646712 Mar 17 15:45 > /usr/libexec/flatpak-system-helper > [tbl@localhost ~]$ sudo restorecon -v $_ > restorecon: Could not set context for /usr/libexec/flatpak-system-helper: > Invalid argument > [tbl@localhost ~]$ The flatpak selinux module is not properly installed and the types it provides are not active. Please show: # rpm -qa "*-selinux" # semodule -lfull | grep -v ^100
I believe the flatpack AVCs occur when I ran "dnf upgrade --refresh". As requested: [root@localhost ~]# rpm -qa "*-selinux" smartmontools-selinux-7.2-12.fc36.noarch tpm2-abrmd-selinux-2.3.1-5.fc36.noarch rpm-plugin-selinux-4.17.0-10.fc36.x86_64 container-selinux-2.180.0-1.fc36.noarch flatpak-selinux-1.12.7-1.fc36.noarch snapd-selinux-2.54.4-1.fc36.noarch usbguard-selinux-1.1.0-2.fc36.noarch [root@localhost ~]# semodule -lfull | grep -v ^100 400 fedora34-first-patches pp 400 my-abrtactionsav pp 400 my-abrtactionsav2 pp 300 my-qemukvm pp 300 my-qemusystemx86 pp 300 my-sshd pp 200 container pp 200 flatpak pp 200 smartmon pp 200 snappy pp 200 swtpm pp 200 swtpm_svirt pp 200 tabrmd pp 200 usbguard pp [root@localhost ~]#
The top 6 modules above are very old patches I made in 2020/2021. I thought to remove them, but I get this on the first one: [root@localhost ~]# semodule --remove=fedora34-first-patches libsemanage.semanage_direct_remove_key: Removing last fedora34-first-patches module (no other fedora34-first-patches module exists at another priority). Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST semodule: Failed! [root@localhost ~]#
Got this with this morning's updates: Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 30/62 Upgrading : container-selinux-2:2.181.0-1.fc36.noarch 30/62 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 30/62 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:305 Failed to resolve AST /usr/sbin/semodule: Failed! /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:container_var_lib_t:s0 uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli
Seems the container SELinux module is installed, but not active. Can you remove and install again container-selinux if no error reported? # dnf remove container-selinux # dnf install container-selinux
Uhhhh....removing container-selinux: appears it wants to remove lots of dependent packages: [root@localhost ~]# dnf remove container-selinux Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Removing: container-selinux noarch 2:2.181.0-1.fc36 @updates-testing 54 k Removing dependent packages: fedora-dockerfiles x86_64 0-0.31.giteab04ff.fc36 @fedora 900 k flatpak-selinux noarch 1.12.7-1.fc36 @updates-testing 12 k gnome-boxes x86_64 42~rc-1.fc36 @fedora 6.0 M guestfs-tools x86_64 1.48.0-1.fc36 @updates-testing 26 M libvirt-daemon-kvm x86_64 8.1.0-2.fc36 @updates-testing 0 moby-engine x86_64 20.10.12-3.fc36 @fedora 128 M runc x86_64 2:1.1.0-2.fc36 @fedora 10 M selinux-policy-targeted noarch 36.5-1.fc36 @updates-testing 17 M smartmontools-selinux noarch 1:7.2-12.fc36 @fedora 13 k snapd x86_64 2.54.4-1.fc36 @updates-testing 46 M tpm2-abrmd-selinux noarch 2.3.1-5.fc36 @fedora 12 k usbguard-selinux noarch 1.1.0-2.fc36 @updates-testing 13 k Removing unused dependencies: containerd x86_64 1.6.1-1.fc36 @updates-testing 127 M edk2-ovmf noarch 20220221gitb24306f15daa-2.fc36 @updates-testing 11 M glusterfs x86_64 10.1-4.fc36 @fedora 2.7 M glusterfs-cli x86_64 10.1-4.fc36 @fedora 519 k glusterfs-fuse x86_64 10.1-4.fc36 @fedora 568 k gvncpulse x86_64 1.3.0-2.fc36 @fedora 47 k hexedit x86_64 1.5-3.fc36 @fedora 74 k libglusterd0 x86_64 10.1-4.fc36 @fedora 15 k libguestfs x86_64 1:1.48.0-1.fc36 @updates-testing 3.8 M libguestfs-appliance x86_64 1:1.48.0-1.fc36 @updates-testing 2.3 M libguestfs-xfs x86_64 1:1.48.0-1.fc36 @updates-testing 9 libtpms x86_64 0.9.3-1.20220307gita63c51805e.fc36 @updates-testing 971 k libvirt-daemon-driver-interface x86_64 8.1.0-2.fc36 @updates-testing 594 k libvirt-daemon-driver-nodedev x86_64 8.1.0-2.fc36 @updates-testing 659 k libvirt-daemon-driver-nwfilter x86_64 8.1.0-2.fc36 @updates-testing 680 k libvirt-daemon-driver-qemu x86_64 8.1.0-2.fc36 @updates-testing 2.6 M libvirt-daemon-driver-secret x86_64 8.1.0-2.fc36 @updates-testing 586 k libvirt-daemon-driver-storage x86_64 8.1.0-2.fc36 @updates-testing 0 libvirt-daemon-driver-storage-disk x86_64 8.1.0-2.fc36 @updates-testing 32 k libvirt-daemon-driver-storage-gluster x86_64 8.1.0-2.fc36 @updates-testing 40 k libvirt-daemon-driver-storage-iscsi x86_64 8.1.0-2.fc36 @updates-testing 24 k libvirt-daemon-driver-storage-logical x86_64 8.1.0-2.fc36 @updates-testing 32 k libvirt-daemon-driver-storage-mpath x86_64 8.1.0-2.fc36 @updates-testing 16 k libvirt-daemon-driver-storage-rbd x86_64 8.1.0-2.fc36 @updates-testing 44 k libvirt-daemon-driver-storage-scsi x86_64 8.1.0-2.fc36 @updates-testing 24 k libvirt-daemon-driver-storage-sheepdog x86_64 8.1.0-2.fc36 @updates-testing 20 k libvirt-daemon-driver-storage-zfs x86_64 8.1.0-2.fc36 @updates-testing 24 k libvirt-gconfig x86_64 4.0.0-4.fc36 @fedora 393 k libvirt-gobject x86_64 4.0.0-4.fc36 @fedora 236 k lsscsi x86_64 0.32-5.fc36 @fedora 129 k lzop x86_64 1.04-8.fc36 @fedora 107 k qemu-kvm x86_64 2:6.2.0-5.fc36 @fedora 0 qemu-kvm-core x86_64 2:6.2.0-5.fc36 @fedora 0 qemu-system-x86 x86_64 2:6.2.0-5.fc36 @fedora 0 qemu-system-x86-core x86_64 2:6.2.0-5.fc36 @fedora 32 M rpm-plugin-selinux x86_64 4.17.0-10.fc36 @updates-testing 16 k scrub x86_64 2.6.1-4.fc36 @fedora 127 k seabios-bin noarch 1.16.0-1.fc36 @updates-testing 916 k seavgabios-bin noarch 1.16.0-1.fc36 @updates-testing 325 k selinux-policy noarch 36.5-1.fc36 @updates-testing 25 k sgabios-bin noarch 1:0.20180715git-8.fc36 @fedora 4.0 k sheepdog x86_64 1.0.1-17.fc36 @fedora 736 k snap-confine x86_64 2.54.4-1.fc36 @updates-testing 8.1 M snapd-selinux noarch 2.54.4-1.fc36 @updates-testing 44 k supermin x86_64 5.3.2-1.fc36 @updates-testing 1.6 M swtpm x86_64 0.7.2-1.20220307git21c90c1.fc36 @updates-testing 217 k swtpm-libs x86_64 0.7.2-1.20220307git21c90c1.fc36 @updates-testing 99 k swtpm-tools x86_64 0.7.2-1.20220307git21c90c1.fc36 @updates-testing 278 k trousers x86_64 0.3.15-6.fc36 @fedora 362 k xen-libs x86_64 4.16.0-5.fc36 @updates-testing 1.8 M xen-licenses x86_64 4.16.0-5.fc36 @updates-testing 409 k zerofree x86_64 1.1.1-9.fc36 @fedora 55 k zfs-fuse x86_64 0.7.2.2-21.fc36 @fedora 6.0 M Transaction Summary ================================================================================ Remove 66 Packages Is this what we want?
OK, I finessed the above by using dnf shell. Here is what I get: > remove container-selinux > install container-selinux Package container-selinux-2:2.181.0-1.fc36.noarch is already installed. > run Problem: cannot install the best candidate for the job - conflicting requests ================================================================================ Package Arch Version Repository Size ================================================================================ Reinstalling: container-selinux noarch 2:2.181.0-1.fc36 updates-testing 49 k Transaction Summary ================================================================================ Total download size: 49 k Installed size: 54 k Is this ok [y/N]: y Downloading Packages: container-selinux-2.181.0-1.fc36.noarch.rpm 294 kB/s | 49 kB 00:00 -------------------------------------------------------------------------------- Total 85 kB/s | 49 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Reinstalling : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:305 Failed to resolve AST /usr/sbin/semodule: Failed! /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:container_var_lib_t:s0 uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli Cleanup : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 2/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Reinstalled: container-selinux-2:2.181.0-1.fc36.noarch Complete! Last metadata expiration check: 0:18:39 ago on Tue 29 Mar 2022 11:26:08 AM PDT. >
Looks like we have a conflict on a file context. /exports(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/registry(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/lxc(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/lxd(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/docker(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/containerd(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/containers(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/ocid(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/kubelet(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/docker-latest(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) /var/lib/cni(/.*)? gen_context(system_u:object_r:container_var_lib_t,s0) Not sure what path is the conflict.
I think I tried really hard, but I cannot reproduce such a serious problem with current versions of packages. Given this: > Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:305 showed during container-selinux update, it's worth trying to reinstall snapd-selinux too, perhaps do separate remove and install.
OK. Removing ..... [tbl@localhost ~]$ sudo dnf remove snapd-selinux Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Removing: snapd-selinux noarch 2.54.4-1.fc36 @updates-testing 44 k Removing dependent packages: snapd x86_64 2.54.4-1.fc36 @updates-testing 46 M Removing unused dependencies: snap-confine x86_64 2.54.4-1.fc36 @updates-testing 8.1 M Transaction Summary ================================================================================ Remove 3 Packages Freed space: 54 M Is this ok [y/N]: y Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: snapd-2.54.4-1.fc36.x86_64 1/3 Removed /etc/systemd/system/sockets.target.wants/snapd.socket. Removed /etc/systemd/user/sockets.target.wants/snapd.session-agent.socket. Stopping var-lib-snapd-snap-authy-3.mount Removing snap authy Removing var-lib-snapd-snap-authy-3.mount Stopping var-lib-snapd-snap-authy-5.mount Removing snap authy Removing var-lib-snapd-snap-authy-5.mount Stopping var-lib-snapd-snap-core-11167.mount Removing snap core Removing var-lib-snapd-snap-core-11167.mount Stopping var-lib-snapd-snap-core18-1754.mount Removing snap core18 Removing var-lib-snapd-snap-core18-1754.mount Stopping var-lib-snapd-snap-core18-2066.mount Removing snap core18 Removing var-lib-snapd-snap-core18-2066.mount Stopping var-lib-snapd-snap-gnome\x2d3\x2d28\x2d1804-116.mount Removing snap gnome-3-28-1804 Removing var-lib-snapd-snap-gnome\x2d3\x2d28\x2d1804-116.mount Stopping var-lib-snapd-snap-gnome\x2d3\x2d28\x2d1804-145.mount Removing snap gnome-3-28-1804 Removing var-lib-snapd-snap-gnome\x2d3\x2d28\x2d1804-145.mount Stopping var-lib-snapd-snap-gtk\x2dcommon\x2dthemes-1506.mount Removing snap gtk-common-themes Removing var-lib-snapd-snap-gtk\x2dcommon\x2dthemes-1506.mount Stopping var-lib-snapd-snap-gtk\x2dcommon\x2dthemes-1515.mount Removing snap gtk-common-themes Removing var-lib-snapd-snap-gtk\x2dcommon\x2dthemes-1515.mount Stopping var-lib-snapd-snap-hello\x2dworld-29.mount Removing snap hello-world Removing var-lib-snapd-snap-hello\x2dworld-29.mount Stopping var-lib-snapd-snap-snapd-12057.mount Removing snap snapd Removing var-lib-snapd-snap-snapd-12057.mount Stopping var-lib-snapd-snap-snapd-7264.mount Removing snap snapd Removing var-lib-snapd-snap-snapd-7264.mount Discarding preserved snap namespaces Removing downloaded snaps Removing features exported from snapd to helper tools Final directory cleanup Removing leftover snap shared state data Removing snapd catalog cache Erasing : snapd-2.54.4-1.fc36.x86_64 1/3 warning: file /var/snap: remove failed: No such file or directory warning: file /var/lib/snapd/snap: remove failed: No such file or directory Running scriptlet: snapd-2.54.4-1.fc36.x86_64 1/3 Erasing : snapd-selinux-2.54.4-1.fc36.noarch 2/3 Running scriptlet: snapd-selinux-2.54.4-1.fc36.noarch 2/3 uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli Erasing : snap-confine-2.54.4-1.fc36.x86_64 3/3 Running scriptlet: snap-confine-2.54.4-1.fc36.x86_64 3/3 Verifying : snap-confine-2.54.4-1.fc36.x86_64 1/3 Verifying : snapd-2.54.4-1.fc36.x86_64 2/3 Verifying : snapd-selinux-2.54.4-1.fc36.noarch 3/3 Removed: snap-confine-2.54.4-1.fc36.x86_64 snapd-2.54.4-1.fc36.x86_64 snapd-selinux-2.54.4-1.fc36.noarch Complete! [tbl@localhost ~]$ Here is the (re)install: Dependencies resolved. ================================================================================ Package Architecture Version Repository Size ================================================================================ Installing: snap-confine x86_64 2.54.4-1.fc36 fedora 2.2 M snapd x86_64 2.54.4-1.fc36 fedora 13 M snapd-selinux noarch 2.54.4-1.fc36 fedora 232 k Transaction Summary ================================================================================ Install 3 Packages Total download size: 16 M Installed size: 54 M Is this ok [y/N]: y Downloading Packages: (1/3): snapd-selinux-2.54.4-1.fc36.noarch.rpm 138 kB/s | 232 kB 00:01 (2/3): snap-confine-2.54.4-1.fc36.x86_64.rpm 554 kB/s | 2.2 MB 00:04 (3/3): snapd-2.54.4-1.fc36.x86_64.rpm 2.5 MB/s | 13 MB 00:05 -------------------------------------------------------------------------------- Total 2.7 MB/s | 16 MB 00:05 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: snapd-selinux-2.54.4-1.fc36.noarch 1/3 Installing : snapd-selinux-2.54.4-1.fc36.noarch 1/3 Running scriptlet: snapd-selinux-2.54.4-1.fc36.noarch 1/3 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST /usr/sbin/semodule: Failed! uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli Installing : snap-confine-2.54.4-1.fc36.x86_64 2/3 Installing : snapd-2.54.4-1.fc36.x86_64 3/3 Running scriptlet: snapd-2.54.4-1.fc36.x86_64 3/3 Created symlink /etc/systemd/system/sockets.target.wants/snapd.socket → /usr/lib/systemd/system/snapd.socket. Created symlink /etc/systemd/user/sockets.target.wants/snapd.session-agent.socket → /usr/lib/systemd/user/snapd.session-agent.socket. Running scriptlet: snapd-selinux-2.54.4-1.fc36.noarch 3/3 Running scriptlet: snapd-2.54.4-1.fc36.x86_64 3/3 Verifying : snap-confine-2.54.4-1.fc36.x86_64 1/3 Verifying : snapd-2.54.4-1.fc36.x86_64 2/3 Verifying : snapd-selinux-2.54.4-1.fc36.noarch 3/3 Installed: snap-confine-2.54.4-1.fc36.x86_64 snapd-2.54.4-1.fc36.x86_64 snapd-selinux-2.54.4-1.fc36.noarch Complete! [tbl@localhost ~]$
Created attachment 1869465 [details] restorecon -v -R failures
I downgraded selinux-policy, selinux-policy-targeted and container-selinux: Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Downgrading: container-selinux noarch 2:2.180.0-1.fc36 fedora 50 k selinux-policy noarch 36.4-1.fc36 @commandline 71 k selinux-policy-targeted noarch 36.4-1.fc36 @commandline 6.3 M Transaction Summary ================================================================================ Downgrade 3 Packages Total size: 6.4 M Total download size: 50 k Is this ok [y/N]: y Downloading Packages: container-selinux-2.180.0-1.fc36.noarch.rpm 142 kB/s | 50 kB 00:00 -------------------------------------------------------------------------------- Total 65 kB/s | 50 kB 00:00 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Running scriptlet: selinux-policy-targeted-36.4-1.fc36.noarch 1/1 Preparing : 1/1 Downgrading : selinux-policy-36.4-1.fc36.noarch 1/6 Running scriptlet: selinux-policy-36.4-1.fc36.noarch 1/6 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST /usr/sbin/semodule: Failed! Running scriptlet: selinux-policy-targeted-36.4-1.fc36.noarch 2/6 Downgrading : selinux-policy-targeted-36.4-1.fc36.noarch 2/6 Running scriptlet: selinux-policy-targeted-36.4-1.fc36.noarch 2/6 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST /usr/sbin/semodule: Failed! uavc: op=setenforce lsm=selinux enforcing=0 res=1uavc: op=load_policy lsm=seli Running scriptlet: container-selinux-2:2.180.0-1.fc36.noarch 3/6 Downgrading : container-selinux-2:2.180.0-1.fc36.noarch 3/6 Running scriptlet: container-selinux-2:2.180.0-1.fc36.noarch 3/6 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:305 Failed to resolve AST /usr/sbin/semodule: Failed! /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:container_var_lib_t:s0 Cleanup : container-selinux-2:2.181.0-1.fc36.noarch 4/6 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 4/6 Running scriptlet: selinux-policy-36.5-1.fc36.noarch 5/6 Cleanup : selinux-policy-36.5-1.fc36.noarch 5/6 Running scriptlet: selinux-policy-36.5-1.fc36.noarch 5/6 Cleanup : selinux-policy-targeted-36.5-1.fc36.noarch 6/6 Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 6/6 Running scriptlet: selinux-policy-targeted-36.4-1.fc36.noarch 6/6 Running scriptlet: container-selinux-2:2.180.0-1.fc36.noarch 6/6 Running scriptlet: selinux-policy-targeted-36.5-1.fc36.noarch 6/6 Verifying : container-selinux-2:2.180.0-1.fc36.noarch 1/6 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 2/6 Verifying : selinux-policy-36.4-1.fc36.noarch 3/6 Verifying : selinux-policy-36.5-1.fc36.noarch 4/6 Verifying : selinux-policy-targeted-36.4-1.fc36.noarch 5/6 Verifying : selinux-policy-targeted-36.5-1.fc36.noarch 6/6 You should restart: * Some applications using: sudo systemctl restart libvirtd sudo systemctl restart systemd-logind sudo systemctl restart systemd-resolved sudo systemctl restart systemd-udevd * These applications manually: (sd-pam) Additionally, there are: - 1 processes requiring reboot For more information run: sudo tracer -iat 1648655131.412743 Downgraded: container-selinux-2:2.180.0-1.fc36.noarch selinux-policy-36.4-1.fc36.noarch selinux-policy-targeted-36.4-1.fc36.noarch Complete! [tbl@localhost Downloads]$ Attempting to remove old module stills fails: [tbl@localhost Downloads]$ sudo semodule --remove=fedora34-first-patches libsemanage.semanage_direct_remove_key: Removing last fedora34-first-patches module (no other fedora34-first-patches module exists at another priority). Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/container/cil:1263 Failed to resolve AST semodule: Failed! [tbl@localhost Downloads]$ Selinux really seems to not like line 1263 of container/cil...
I noticed that /etc/selinux/targeted/contexts/files/file_contexts is much different from the copy on my last backup (before 'dnf system-upgrade'): [tbl@localhost files]$ ls -l /etc/selinux/targeted/contexts/files/file_contexts /run/media/tbl/NucBackup/etc/selinux/targeted/contexts/files/file_contexts -rw-r--r--. 1 root root 407365 Mar 21 03:44 /etc/selinux/targeted/contexts/files/file_contexts -rw-r--r--. 1 root root 414488 Mar 19 06:49 /run/media/tbl/NucBackup/etc/selinux/targeted/contexts/files/file_contexts [tbl@localhost files]$ and the file_contexts in /etc/selinux/.... is missing just about all specs for 'container': [tbl@localhost files]$ grep container /etc/selinux/targeted/contexts/files/file_contexts /var/lib/rkt/cas(/.*)? system_u:object_r:container_file_t:s0 /usr/lib/xulrunner[^/]*/plugin-container -- system_u:object_r:mozilla_plugin_exec_t:s0 /var/lib/containers/home(/.*)? system_u:object_r:openshift_var_lib_t:s0 /usr/bin/swift-container-sync -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-server -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-auditor -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-updater -- system_u:object_r:swift_exec_t:s0 /usr/lib/firefox/plugin-container -- system_u:object_r:mozilla_plugin_exec_t:s0 /usr/bin/swift-container-reconciler -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-replicator -- system_u:object_r:swift_exec_t:s0 [tbl@localhost files]$ vs the backup (fc35) file_contexts: [tbl@localhost files]$ grep container file_contexts /usr/s?bin/lxc -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/lxd -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/crun -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/runc -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/crio.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/lxc-.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/lxd-.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/ocid.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/docker.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/fuidshift -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/kubelet.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/hyperkube.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/containerd.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/docker-latest -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/docker-current -- system_u:object_r:container_runtime_exec_t:s0 /usr/s?bin/docker-novolume-plugin -- system_u:object_r:container_auth_exec_t:s0 /exports(/.*)? system_u:object_r:container_var_lib_t:s0 /etc/crio(/.*)? system_u:object_r:container_config_t:s0 /etc/docker(/.*)? system_u:object_r:container_config_t:s0 /var/lib/cni(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lib/lxc(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lib/lxd(/.*)? system_u:object_r:container_var_lib_t:s0 /var/log/lxc(/.*)? system_u:object_r:container_log_t:s0 /var/log/lxd(/.*)? system_u:object_r:container_log_t:s0 /usr/local/s?bin/crun -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/runc -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/crio.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/docker.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/kubelet.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/hyperkube.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/s?bin/containerd.* -- system_u:object_r:container_runtime_exec_t:s0 /var/lib/ocid(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lock/lxc(/.*)? system_u:object_r:container_lock_t:s0 /var/log/pods(/.*)? system_u:object_r:container_log_t:s0 /var/run/crio(/.*)? system_u:object_r:container_var_run_t:s0 /etc/containerd(/.*)? system_u:object_r:container_config_t:s0 /srv/containers(/.*)? system_u:object_r:container_file_t:s0 /var/lib/docker(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lib/origin(/.*)? system_u:object_r:container_file_t:s0 /var/run/docker(/.*)? system_u:object_r:container_var_run_t:s0 /var/lib/kubelet(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lib/rkt/cas(/.*)? system_u:object_r:container_file_t:s0 /var/run/flannel(/.*)? system_u:object_r:container_var_run_t:s0 /usr/lib/docker/[^/]*plugin -- system_u:object_r:container_runtime_exec_t:s0 /var/lib/docker/.*/config\.env system_u:object_r:container_ro_file_t:s0 /usr/libexec/lxc/.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/libexec/lxd/.* -- system_u:object_r:container_runtime_exec_t:s0 /var/lib/registry(/.*)? system_u:object_r:container_var_lib_t:s0 /etc/docker-latest(/.*)? system_u:object_r:container_config_t:s0 /usr/bin/container[^/]*plugin -- system_u:object_r:container_runtime_exec_t:s0 /usr/lib/xulrunner[^/]*/plugin-container -- system_u:object_r:mozilla_plugin_exec_t:s0 /var/lib/containerd(/.*)? system_u:object_r:container_var_lib_t:s0 /var/lib/containers(/.*)? system_u:object_r:container_var_lib_t:s0 /var/log/containers(/.*)? system_u:object_r:container_log_t:s0 /var/run/containerd(/.*)? system_u:object_r:container_var_run_t:s0 /var/run/containers(/.*)? system_u:object_r:container_var_run_t:s0 /var/srv/containers(/.*)? system_u:object_r:container_file_t:s0 /usr/libexec/docker/.* -- system_u:object_r:container_runtime_exec_t:s0 /var/lib/docker/init(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containerd/[^/]*/sandboxes(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containerd/[^/]*/snapshots(/.*)? system_u:object_r:container_ro_file_t:s0 /var/run/containerd/[^/]*/sandboxes/[^/]*/shm(/.*)? system_u:object_r:container_runtime_tmpfs_t:s0 /var/lib/kubelet/pods(/.*)? system_u:object_r:container_file_t:s0 /var/lib/docker-latest(/.*)? system_u:object_r:container_var_lib_t:s0 /var/run/docker-client(/.*)? system_u:object_r:container_var_run_t:s0 /usr/local/lib/docker/[^/]*plugin -- system_u:object_r:container_runtime_exec_t:s0 /var/lib/docker/overlay(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/ocid/sandboxes(/.*)? system_u:object_r:container_ro_file_t:s0 /var/run/docker/plugins(/.*)? system_u:object_r:container_plugin_var_run_t:s0 /var/lib/docker-latest/.*/config\.env system_u:object_r:container_ro_file_t:s0 /var/lib/containers/home(/.*)? system_u:object_r:openshift_var_lib_t:s0 /var/lib/docker/overlay2(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/kata-containers(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/kubernetes/pods(/.*)? system_u:object_r:container_file_t:s0 /var/run/kata-containers(/.*)? system_u:object_r:container_kvm_var_run_t:s0 /usr/libexec/docker/docker.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/local/libexec/docker/.* -- system_u:object_r:container_runtime_exec_t:s0 /var/cache/kata-containers(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/atomic(/.*)? <<none>> /usr/lib/systemd/system/lxd.* -- system_u:object_r:container_unit_file_t:s0 /var/lib/containers/overlay(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/docker-latest/init(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/docker/containers/.*/hosts system_u:object_r:container_ro_file_t:s0 /var/lib/docker/containers/.*/.*\.log system_u:object_r:container_log_t:s0 /var/lib/docker/containers/.*/hostname system_u:object_r:container_ro_file_t:s0 /var/lib/containers/overlay2(/.*)? system_u:object_r:container_ro_file_t:s0 /usr/lib/systemd/system/docker.* -- system_u:object_r:container_unit_file_t:s0 /var/lib/docker-latest/overlay(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/docker-latest/overlay2(/.*)? system_u:object_r:container_ro_file_t:s0 /usr/local/libexec/docker/docker.* -- system_u:object_r:container_runtime_exec_t:s0 /usr/lib/systemd/system/containerd.* -- system_u:object_r:container_unit_file_t:s0 /var/lib/containers/overlay-images(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/overlay-layers(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/docker-latest/containers/.*/hosts system_u:object_r:container_ro_file_t:s0 /var/lib/docker-latest/containers/.*/.*\.log system_u:object_r:container_log_t:s0 /var/lib/docker-latest/containers/.*/hostname system_u:object_r:container_ro_file_t:s0 /var/lib/containers/overlay2-images(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/overlay2-layers(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/overlay(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/overlay2(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/volumes/[^/]*/.* system_u:object_r:container_file_t:s0 /var/lib/containers/storage/overlay-images(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/overlay-layers(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/overlay2-images(/.*)? system_u:object_r:container_ro_file_t:s0 /var/lib/containers/storage/overlay2-layers(/.*)? system_u:object_r:container_ro_file_t:s0 /root/\.docker system_u:object_r:container_home_t:s0 /usr/bin/podman -- system_u:object_r:container_runtime_exec_t:s0 /var/run/docker\.pid -- system_u:object_r:container_var_run_t:s0 /var/run/docker\.sock -s system_u:object_r:container_var_run_t:s0 /usr/local/bin/podman -- system_u:object_r:container_runtime_exec_t:s0 /usr/bin/rhel-push-plugin -- system_u:object_r:container_runtime_exec_t:s0 /usr/sbin/rhel-push-plugin -- system_u:object_r:container_runtime_exec_t:s0 /usr/bin/swift-container-sync -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-server -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-auditor -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-updater -- system_u:object_r:swift_exec_t:s0 /usr/lib/firefox/plugin-container -- system_u:object_r:mozilla_plugin_exec_t:s0 /usr/bin/swift-container-reconciler -- system_u:object_r:swift_exec_t:s0 /usr/bin/swift-container-replicator -- system_u:object_r:swift_exec_t:s0 /usr/lib/docker/docker-novolume-plugin -- system_u:object_r:container_auth_exec_t:s0 [tbl@localhost files]$ I don't suppose there is some hackish way to recover a working Selinux by using the backup file_contexts?
Believe I've made some progress... I removed snapd-selinux (previously removed snapd) and dain-snappy. Reinstalling container-selinux still fails: Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Reinstalling : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Failed to resolve allow statement at /var/lib/selinux/targeted/tmp/modules/200/snappy/cil:305 Failed to resolve AST /usr/sbin/semodule: Failed! /etc/selinux/targeted/contexts/files/file_contexts: invalid context system_u:object_r:container_var_lib_t:s0 Cleanup : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 2/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Removing BOTH container and snappy modules in the same command seems to work (removing them individually fails): [tbl@localhost ~]$ sudo semodule -X 200 -r container -r snappy libsemanage.semanage_direct_remove_key: Removing last container module (no other container module exists at another priority). libsemanage.semanage_direct_remove_key: Removing last snappy module (no other snappy module exists at another priority). [tbl@localhost ~]$ As does reinstalling container-selinux: [tbl@localhost ~]$ sudo dnf reinstall container-selinux Fedora 36 - x86_64 - VirtualBox 7.7 kB/s | 6.9 kB 00:00 Errors during downloading metadata for repository 'virtualbox': - Status code: 404 for http://download.virtualbox.org/virtualbox/rpm/fedora/36/x86_64/repodata/repomd.xml (IP: 96.16.68.85) Error: Failed to download metadata for repo 'virtualbox': Cannot download repomd.xml: Cannot download repodata/repomd.xml: All mirrors were tried Ignoring repositories: virtualbox Last metadata expiration check: 0:10:33 ago on Fri 01 Apr 2022 07:04:10 AM PDT. Dependencies resolved. ================================================================================ Package Arch Version Repository Size ================================================================================ Reinstalling: container-selinux noarch 2:2.181.0-1.fc36 updates-testing 49 k Transaction Summary ================================================================================ Total download size: 49 k Installed size: 54 k Is this ok [y/N]: y Downloading Packages: container-selinux-2.181.0-1.fc36.noarch.rpm 64 kB/s | 49 kB 00:00 -------------------------------------------------------------------------------- Total 37 kB/s | 49 kB 00:01 Running transaction check Transaction check succeeded. Running transaction test Transaction test succeeded. Running transaction Preparing : 1/1 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Reinstalling : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 1/2 Cleanup : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Running scriptlet: container-selinux-2:2.181.0-1.fc36.noarch 2/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 1/2 Verifying : container-selinux-2:2.181.0-1.fc36.noarch 2/2 Reinstalled: container-selinux-2:2.181.0-1.fc36.noarch Complete! [tbl@localhost ~]$ 'restorecon -v -R' now completes without errors (many files relabeled). [Additionally, starting a Rawhide VM in virt-manager now works in enforcing mode. No swtpm AVCs.]
Folks, some socket classes were removed in selinux-policy-36.1. The snapd-selinux package likely just needs to be rebuilt with the latest version of selinux-policy. This is the first line when installation fails: (allow snappy_unconfined_snap_t self (bridge_socket (ioctl read write create getattr setattr lock append bind connect getopt setopt shutdown)))
I'm pushing out update of snapd 2.55.2 which should take care of the need to rebuild the policy.
I am trying to keep the Proposed Common Bug entry for this issue updated. Am I correct to assume that after snapd-2.55.2 is installed on F35, updating F36 does not lead to system with this problem anymore? What about F36 systems that are already suffering from this problem? Is manual recovery as documented at [1] still needed? [1]: https://ask.fedoraproject.org/t/dnf-upgrade-of-some-packages-fail-after-upgrade-from-f35/20983#workarounds-when-the-issue-is-solved-change-this-to-solution-and-mark-a-reply-below-with-that-solution-4
(In reply to Otto Urpelainen from comment #21) > I am trying to keep the Proposed Common Bug entry for this issue updated. > > Am I correct to assume that after snapd-2.55.2 is installed on F35, > updating F36 does not lead to system with this problem anymore? IMHO only F36 version of snapd needs to be rebuilt. > What about F36 systems that are already suffering from this problem? > Is manual recovery as documented at [1] still needed? > > [1]: > https://ask.fedoraproject.org/t/dnf-upgrade-of-some-packages-fail-after- > upgrade-from-f35/20983#workarounds-when-the-issue-is-solved-change-this-to- > solution-and-mark-a-reply-below-with-that-solution-4 There seems to be another problem interfering with this one, we are still looking for the root cause.
On a side note, if the policy is so brittle, does anyone have a clue why the pacakges that clearly depend on selinux-policy are not automatically rebuilt?
(In reply to Zdenek Pytela from comment #22) > (In reply to Otto Urpelainen from comment #21) > > I am trying to keep the Proposed Common Bug entry for this issue updated. > > > > Am I correct to assume that after snapd-2.55.2 is installed on F35, > > updating F36 does not lead to system with this problem anymore? > IMHO only F36 version of snapd needs to be rebuilt. > > > What about F36 systems that are already suffering from this problem? > > Is manual recovery as documented at [1] still needed? > > > > [1]: > > https://ask.fedoraproject.org/t/dnf-upgrade-of-some-packages-fail-after- > > upgrade-from-f35/20983#workarounds-when-the-issue-is-solved-change-this-to- > > solution-and-mark-a-reply-below-with-that-solution-4 > There seems to be another problem interfering with this one, we are still > looking for the root cause. Thank you for the explanation. I now understand I have conflated these separate issues in the Proposed Common Bug. I will fix that.
This message is a reminder that Fedora Linux 36 is nearing its end of life. Fedora will stop maintaining and issuing updates for Fedora Linux 36 on 2023-05-16. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a 'version' of '36'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, change the 'version' to a later Fedora Linux version. Note that the version field may be hidden. Click the "Show advanced fields" button if you do not see it. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora Linux 36 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora Linux, you are encouraged to change the 'version' to a later version prior to this bug being closed.
Fedora Linux 36 entered end-of-life (EOL) status on 2023-05-16. Fedora Linux 36 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora Linux please feel free to reopen this bug against that version. Note that the version field may be hidden. Click the "Show advanced fields" button if you do not see the version field. If you are unable to reopen this bug, please file a new report against an active release. Thank you for reporting this bug and we are sorry it could not be fixed.