On Sat, 2020-01-11 at 19:28 -0800, Samuel Sieb wrote:
> On 1/11/20 7:24 PM, Robert G (Doc) Savage via users wrote:
> > If you believe that 11-dhclient should be allowed getattr access on
> > the 
> > hostname file by default.
> > Then you should report this as a bug.
> > You can generate a local policy module to allow this access.
> > Do
> > allow this access for now by executing:
> > # ausearch -c '11-dhclient' --raw | audit2allow -M my-11dhclient
> > # semodule -X 300 -i my-11dhclient.pp21
> 
> That seems like a bug or something mislabeled.
> 
> > Executing these two commands appears to have fixed the problem.
> 
> I suppose that will work, but it would have been better to solve the 
> underlying problem.
> 

If this is a bug, I believe it is caused by a problem in the major
version upgrade process.

Remember, this system has been upgraded twice:  F29 -> F30 Beta -> F31.
I had very significant SELinux problems after the first upgrade to F30
Beta. I must have had a hundred "ausearch" errors I had to fix just
like this one. At the suggestion of a friend, I was able to mass reset
the contexts in the / filesystem. Had I done a from scratch install of
F31, I don't think I would have encountered this problem. There may be
more bugs lurking, but at least now I have a tool to ID and fix them.

--Doc Savage
    Fairview Heights, IL


_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct: 
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org

Reply via email to