On 21. 01. 22 17:03, Zdenek Pytela wrote:
Hey folks,I've just noticed that `ausearch -m AVC,USER_AVC -ts recent` lists a lot of: type=AVC msg=audit(1642770831.616:31668): avc: denied { read } for pid=866275 comm="locate" name="plocate.db" dev="dm-0" ino=5268062 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=file permissive=0 Is this a bug, or some kind of error in configuration?plocate uses /var/lib/plocate as its data directory, so it needs to have assigned the correct label in selinux-policy. I've already submitted a PR for the change. https://github.com/fedora-selinux/selinux-policy/pull/1018 <https://github.com/fedora-selinux/selinux-policy/pull/1018>
Thanks! -- Miro Hrončok -- Phone: +420777974800 IRC: mhroncok _______________________________________________ devel mailing list -- devel@lists.fedoraproject.org To unsubscribe send an email to devel-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure
