On 14/04/2021 11:41, home user wrote:
Tomorrow morning, I will try the no-xeyes test that you suggest.
Ignoring the problem is tempting, but I don't want to give up toooooo easily.
Well, pardon me for saying I find that last observation somewhat narrow in
scope. :-) :-)
That being said....
Your AVC you posted was....
type=AVC msg=audit(1618332726.288:964): avc: denied { write } for pid=129605
co
mm="gstglcontext"
path=2F6D656D66643A2F2E6E76696469615F6472762E5858585858582028646
56C6574656429 dev="tmpfs" ino=1025
scontext=unconfined_u:unconfined_r:thumb_t:s0-s
0:c0.c1023 tcontext=system_u:object_r:xserver_tmpfs_t:s0 tclass=file
permissive=0
Are all of your alerts of this kind? You may want to use "ausearch" with -c
gstglcontext.
You can narrow the window by using -ts in the ausearch command. Looking a the
man page
to find the options for that parameter.
That being said, gstglcontext is related to OpenGL which "is a cross-language, cross-platform
application programming interface (API) for rendering 2D and 3D vector graphics". The
"scontext" has as part of it xserver_tmpfs_t which furthers this.
So, the next time you get this alert check out the AVC and find the process
associated with pid=.
--
Remind me to ignore comments which aren't germane to the thread.
_______________________________________________
users mailing list -- users@lists.fedoraproject.org
To unsubscribe send an email to users-le...@lists.fedoraproject.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org
Do not reply to spam on the list, report it:
https://pagure.io/fedora-infrastructure
