User-Agent: Mozilla/5.0 (X11; Linux i686; rv:18.0) Gecko/20100101 Firefox/18.0 Build Identifier: Wnen I open Details, I get several choices. I don't know which is appropriate. Here is the text: SELinux is preventing /usr/bin/gsf-office-thumbnailer from write access on the directory /home/jones/.thumbnails/normal. ***** Plugin restorecon (82.4 confidence) suggests ************************* If you want to fix the label. /home/jones/.thumbnails/normal default label should be thumb_home_t. Then you can run restorecon. Do # /sbin/restorecon -v /home/jones/.thumbnails/normal ***** Plugin file (7.05 confidence) suggests ******************************* If you think this is caused by a badly mislabeled machine. Then you need to fully relabel. Do touch /.autorelabel; reboot ***** Plugin file (7.05 confidence) suggests ******************************* If you think this is caused by a badly mislabeled machine. Then you need to fully relabel. Do touch /.autorelabel; reboot ***** Plugin catchall_labels (4.59 confidence) suggests ******************** If you want to allow gsf-office-thumbnailer to have write access on the normal directory Then you need to change the label on /home/jones/.thumbnails/normal Do # semanage fcontext -a -t FILE_TYPE '/home/jones/.thumbnails/normal' where FILE_TYPE is one of the following: thumb_home_t, cache_home_t, xdm_tmp_t, gstreamer_home_t, thumb_tmpfs_t, user_home_dir_t, thumb_tmp_t, tmpfs_t, user_fonts_cache_t, tmp_t, user_tmp_t. Then execute: restorecon -v '/home/jones/.thumbnails/normal' ***** Plugin catchall (1.31 confidence) suggests *************************** If you believe that gsf-office-thumbnailer should be allowed write access on the normal directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # grep gsf-office-thum /var/log/audit/audit.log | audit2allow -M mypol # semodule -i mypol.pp Additional Information: Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 Target Context system_u:object_r:file_t:s0 Target Objects /home/jones/.thumbnails/normal [ dir ] Source gsf-office-thum Source Path /usr/bin/gsf-office-thumbnailer Port <Unknown> Host localhost.localdomain Source RPM Packages libgsf-1.14.24-1.fc18.i686 Target RPM Packages Policy RPM selinux-policy-3.11.1-76.fc18.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name localhost.localdomain Platform Linux localhost.localdomain 3.7.6-201.fc18.i686.PAE #1 SMP Mon Feb 4 16:05:44 UTC 2013 i686 i686 Alert Count 1 First Seen 2013-02-11 15:49:45 EST Last Seen 2013-02-11 15:49:45 EST Local ID e79c3060-e1b5-4be1-b6e9-ef8507b1f6a5 Raw Audit Messages type=AVC msg=audit(1360615785.157:334): avc: denied { write } for pid=1572 comm="gsf-office-thum" name="normal" dev="sda8" ino=654702 scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir type=SYSCALL msg=audit(1360615785.157:334): arch=i386 syscall=open success=no exit=EACCES a0=8a12888 a1=80c2 a2=180 a3=12 items=0 ppid=1468 pid=1572 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=1000 sgid=1000 fsgid=1000 ses=2 tty=(none) comm=gsf-office-thum exe=/usr/bin/gsf-office-thumbnailer subj=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 key=(null) Hash: gsf-office-thum,thumb_t,file_t,dir,write audit2allow #============= thumb_t ============== #!!!! The source type 'thumb_t' can write to a 'dir' of the following types: # thumb_home_t, cache_home_t, xdm_tmp_t, gstreamer_home_t, thumb_tmpfs_t, user_home_dir_t, thumb_tmp_t, tmpfs_t, user_fonts_cache_t, tmp_t, user_tmp_t allow thumb_t file_t:dir write; audit2allow -R #============= thumb_t ============== #!!!! The source type 'thumb_t' can write to a 'dir' of the following types: # thumb_home_t, cache_home_t, xdm_tmp_t, gstreamer_home_t, thumb_tmpfs_t, user_home_dir_t, thumb_tmp_t, tmpfs_t, user_fonts_cache_t, tmp_t, user_tmp_t allow thumb_t file_t:dir write; Reproducible: Always Steps to Reproduce: 1. Boot in LXDE Actual Results: Warning message Expected Results: No message I get a message involving colord when I start with Desktop.
You will need to fix labeling on your homedir. # restorecon -R -v /home