On 6/30/26 8:24 AM, François Patte wrote:
Bonjour,
I try to have a fail2ban jail for emby-server...
Fail2ban complains that it cannot find a log file for emby but this file
exists and setting setenforce 0 shows that fail2ban can find it.
ls -Z /var/lib/emby/logs/embyserver.txt gives:
system_u:object_r:var_lib_t:s0 /var/lib/emby/logs/embyserver.txt
What can I do to give fail2ban permissons on this file?
Thank you.
--
François Patte
tél : +33 (0)6 7892 5822
https://www.pingala.homelinux.org/~fp
You can tell SELinux to add the var_log_t context (label) to your logs
using this command:
semanage fcontext -a -t var_log_t "/var/lib/emby/logs(/.*)?"
Then, once SELinux knows about it, you can run this command to apply
those labels to the files and directories:
restorecon -R -v /var/lib/emby/logs
That should enable emby-server to be able to modify those log files.
I did a presentation at Red Hat Summit on SELinux. It's gotten about
157,000 views, and the comments are generally positive. It's older, but
the content is still accurate: https://www.youtube.com/watch?v=_WOKRaM-HI4
If you have any questions, let me know. Happy to help out.
--
Thanks!
Thomas Cameron, RHCA V, AWS SA-Pro
--
_______________________________________________
users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/[email protected]
Do not reply to spam, report it:
https://forge.fedoraproject.org/infra/tickets/issues/new