Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-06 Thread Roger Heflin
dac_read_search says that linux permissions are denying access. and it says the file is /etc/shadow, and no one except root is supposed to be able to read that file. So whatever is trying to read /etc/shadow should not be trying to read it, and makes me wonder what is going on, and/or why some pr

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-06 Thread Robert Moskowitz
On 1/6/22 11:53, George N. White III wrote: On Thu, 6 Jan 2022 at 11:13, Robert Moskowitz wrote: On 1/5/22 23:10, Samuel Sieb wrote: > On 1/5/22 18:18, Robert Moskowitz wrote: >> On 1/5/22 21:16, Ed Greshko wrote: >>> On 06/01/2022 09:25, Robert Moskowitz wrote:

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-06 Thread George N. White III
On Thu, 6 Jan 2022 at 11:13, Robert Moskowitz wrote: > > > On 1/5/22 23:10, Samuel Sieb wrote: > > On 1/5/22 18:18, Robert Moskowitz wrote: > >> On 1/5/22 21:16, Ed Greshko wrote: > >>> On 06/01/2022 09:25, Robert Moskowitz wrote: > > > On 1/5/22 17:17, Ed Greshko wrote: > > On

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-06 Thread Robert Moskowitz
On 1/5/22 23:10, Samuel Sieb wrote: On 1/5/22 18:18, Robert Moskowitz wrote: On 1/5/22 21:16, Ed Greshko wrote: On 06/01/2022 09:25, Robert Moskowitz wrote: On 1/5/22 17:17, Ed Greshko wrote: On 05/01/2022 21:02, Robert Moskowitz wrote: If you want to help identify if domain needs this

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Samuel Sieb
On 1/5/22 18:18, Robert Moskowitz wrote: On 1/5/22 21:16, Ed Greshko wrote: On 06/01/2022 09:25, Robert Moskowitz wrote: On 1/5/22 17:17, Ed Greshko wrote: On 05/01/2022 21:02, Robert Moskowitz wrote: If you want to help identify if domain needs this access or you have a file with the wro

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Robert Moskowitz
one seems to be home. Here is the full detail; it looks like it may be logwatch causing the problem.  What do I do to fix this? === SELinux is preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Ed Greshko
full detail; it looks like it may be logwatch causing the problem.  What do I do to fix this? === SELinux is preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests ** If you want to help identify if domain

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Robert Moskowitz
causing the problem.  What do I do to fix this? === SELinux is preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests ** If you want to help identify if domain needs this access or you have a file with

Re: SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Ed Greshko
fix this? === SELinux is preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests ** If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system Then

SELinux is preventing mktemp from using the dac_read_search capability.

2022-01-05 Thread Robert Moskowitz
preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests ** If you want to help identify if domain needs this access or you have a file with the wrong permissions on your system Then turn on full auditing to get path

SELinux is preventing mktemp from using the dac_read_search capability.

2020-05-06 Thread Robert Moskowitz
I had this on F30 and pretty much ignored it.  Now I am getting it on this new F32 install: What daily process is causing this? SELinux is preventing mktemp from using the dac_read_search capability. *  Plugin dac_override (91.4 confidence) suggests ** If you want to