It froze again this morning. I received this SELinux error:
SELinux is preventing abrt-action-sav from write access on the file
/var/lib/rpm/.dbenv.lock.
***** Plugin restorecon (99.5 confidence) suggests
************************
If you want to fix the label.
/var/lib/rpm/.dbenv.lock default label should be rpm_var_lib_t.
Then you can run restorecon. The access attempt may have been stopped due
to insufficient permissions to access a parent directory in which case try
to change the following command accordingly.
Do
# /sbin/restorecon -v /var/lib/rpm/.dbenv.lock
***** Plugin catchall (1.49 confidence) suggests
**************************
If you believe that abrt-action-sav should be allowed write access on the
.dbenv.lock file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'abrt-action-sav' --raw | audit2allow -M my-abrtactionsav
# semodule -X 300 -i my-abrtactionsav.pp
Additional Information:
Source Context system_u:system_r:abrt_t:s0-s0:c0.c1023
Target Context unconfined_u:object_r:var_lib_t:s0
Target Objects /var/lib/rpm/.dbenv.lock [ file ]
Source abrt-action-sav
Source Path abrt-action-sav
Port <Unknown>
Host Brix
Source RPM Packages
Target RPM Packages
Policy RPM <Unknown>
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name Brix
Platform Linux Brix 5.3.8-300.fc31.x86_64 #1 SMP Tue
Oct 29
14:28:41 UTC 2019 x86_64 x86_64
Alert Count 6
First Seen 2019-11-06 09:37:13 MST
Last Seen 2019-11-06 09:55:33 MST
Local ID be5595a9-b33a-40ba-97ba-e4f44ed86d80
Raw Audit Messages
type=AVC msg=audit(1573059333.330:273): avc: denied { write } for
pid=1710 comm="abrt-action-sav" name=".dbenv.lock" dev="dm-0" ino=1835076
scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
Hash: abrt-action-sav,abrt_t,var_lib_t,file,write
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
