SELinux alert when running yum update
by Colin Paul Adams
After upgrading my system from F9 to F10 I ran a yum update.
The following occurred:
Summary:
SELinux is preventing npviewer.bin (nsplugin_t) "search" to ./.fontconfig
(unlabeled_t).
Detailed Description:
SELinux denied access requested by npviewer.bin. It is not expected that this
access is required by npviewer.bin and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of the
application is causing it to require additional access.
Allowing Access:
Sometimes labeling problems can cause SELinux denials. You could try to restore
the default system file context for ./.fontconfig,
restorecon -v './.fontconfig'
If this does not work, there is currently no automatic way to allow this access.
Instead, you can generate a local policy module to allow this access - see FAQ
(http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385) Or you can disable
SELinux protection altogether. Disabling SELinux protection is not recommended.
Please file a bug report (http://bugzilla.redhat.com/bugzilla/enter_bug.cgi)
against this package.
Additional Information:
Source Context unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c102
3
Target Context system_u:object_r:unlabeled_t:s0
Target Objects ./.fontconfig [ dir ]
Source npviewer.bin
Source Path /usr/lib/nspluginwrapper/npviewer.bin
Port <Unknown>
Host susannah.colina.demon.co.uk
Source RPM Packages nspluginwrapper-1.1.2-4.fc10
Target RPM Packages
Policy RPM selinux-policy-3.5.13-18.fc10
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name catchall_file
Host Name susannah.colina.demon.co.uk
Platform Linux susannah.colina.demon.co.uk
2.6.27.5-117.fc10.x86_64 #1 SMP Tue Nov 18
11:58:53 EST 2008 x86_64 x86_64
Alert Count 37
First Seen Sat 29 Nov 2008 15:33:18 GMT
Last Seen Sat 29 Nov 2008 15:33:28 GMT
Local ID 925c2472-2846-47c2-96f9-bccaadb1aaef
Line Numbers
Raw Audit Messages
node=susannah.colina.demon.co.uk type=AVC msg=audit(1227972808.92:117): avc: denied { search } for pid=3733 comm="npviewer.bin" name=".fontconfig" dev=dm-1 ino=19301092 scontext=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
node=susannah.colina.demon.co.uk type=SYSCALL msg=audit(1227972808.92:117): arch=40000003 syscall=5 per=8 success=no exit=-13 a0=87d4d48 a1=0 a2=a5517200 a3=ffffffff items=0 ppid=3588 pid=3733 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=(none) ses=1 comm="npviewer.bin" exe="/usr/lib/nspluginwrapper/npviewer.bin" subj=unconfined_u:unconfined_r:nsplugin_t:s0-s0:c0.c1023 key=(null)
And if I try to raise tyhe bug I get:
ERROR
The requested URL could not be retrieved
--
Colin Adams
Preston Lancashire
15 years, 4 months
Warning: rpmfusion nvidia driver needs a special xorg.conf setup.
by linux guy
Some of you may know this, but I didn't and thus I'll share what I
learned.
The rpmfusion nvidia driver needs a special xorg.conf file. It might
not operate properly with a file that previously operated properly with
say a livna sourced driver.
Specifically, it needs this to be present:
Section "Files"
ModulePath "/usr/lib/xorg/modules/extensions/nvidia"
ModulePath "/usr/lib/xorg/modules"
EndSection
Right now I am unsure if the xorg or nvidia xorg.conf configuration
tools will put both these lines in the xorg.conf file. I doubt they do,
actually.
You can read more about this issue here:
https://bugzilla.rpmfusion.org/show_bug.cgi?id=197
I hope this helps someone.
15 years, 4 months
Fedora 10 install issues
by Kevin Kempter
Hi All;
(sorry - I originally posted this in the wrong list by mistake)
I'm trying to instal Fedora10 on my new laptop but I've run into a few issues.
It's a Dell Precision M6400 - I'm running KDE
I have 2 issues:
1) I cannot get the full screen resolution
I can go to administration --> display and under the 'Hardwae' tab I can
configure the display as a generic or as a Dell 1920x1200 but no matter what
I choose the 'Settings' tab only lets me choose a max of 1400x1050
2) system notification sound works, and rhythmbox sound works but no other
sound / players work such as amaok or Kaffiene
Thanks in advance for any help ...
15 years, 4 months
Fedora Hangs on Laptop
by Dave Cross
I'm running Fedora 9 on a Dell XPS M1330 laptop. I'm using one of the
earliest F9 kernel (2.6.25-14.fc9.i686.PAE) because I've been unable
to get a wireless connection with any later kernel that I've tried.
But I'm having huge problems with this kernel too. At random times the
machine just freezes completely. The capslock and num-lock buttons
flash on and off but the only way out of it seems to be to turn the
system off and restart. Sometimes it can be an hour or so before the
problems occurs, but more often it's a few minutes. This obviously
makes the system pretty much unusable. I can use the system for as
long as Iike when I boot it into Vista.
Has anyone else seen this behaviour? Or do you have any suggestions on
how I can help to investigate the problem?
Thanks,
Dave...
15 years, 4 months
f10: what happened to XFCE?
by Robert P. J. Day
i'm sure this is explained somewhere but i finally got a copy of F10
for i386 and the first thing i noticed is that the desktop choices are
back to just GNOME and KDE -- XFCE, which i'm sure was there in F10
preview, is gone. or am i imagining things?
rday
--
========================================================================
Robert P. J. Day
Linux Consulting, Training and Annoying Kernel Pedantry:
Have classroom, will lecture.
http://crashcourse.ca Waterloo, Ontario, CANADA
========================================================================
15 years, 4 months
some feedback on fedora 10
by Russell Miller
OK, I just upgrated to fedora 10. I've already filed some bug reports,
but here's some feedback.
1) FC9 preupgrade didn't work. It left the /var off of the cache
location. I had to fix it manually and reboot.
2) nv driver is broken with my card. Bug filed on that, so I won't go
into too much further detail, except to say it doesn't detect ANY video ram.
3) One thing I would really, really like - and I'm half tempted to just
write it myself - is a tool to take the stock fedora kernel and build a
new one - with the options that *I* want. Building a new kernel is a
pain in the kiester, and the lack of a good tool to do so (I'm not aware
of one and a quick search on freshmeat doesn't turn one up) is kind
of... surprising, considering that the kernel has been around for so
many years. Is it that much of a black art?
4) KMS seems cool, but it doesn't work on my card, so it falls back to
a lame progress bar on the bottom of the screen. Can we be a little
more informative than that? It didn't even tell me I could press
escape, I had to figure that out on my own.
Other than that fact that I can't get X to working properly either with
the proprietary or free drivers, seems pretty cool. However, *that* is
a showstopper.
--Russell
15 years, 4 months
Next silly Q, ktorrent this time.
by Gene Heskett
Greetings;
I had a screen blank that wouldn't unblank, probably for the same reason it
gets spells of blinking like crazy. So I used the big ctl-alt-backspace
hammer to kill x.
KTorrent was running in window one at the time, seeding the F10-i386-DVD.iso.
Still is for that matter, I can see it in the traffic lights on my switch,
and the running processes in 'htop'.
However, even if I kill all those processes, I still cannot get the ktorrent
gui to come up again. The launch attempt, either from the kmenu, or the CLI,
will restart the processes ok, but still no gui so I can't control it, and
its apparently part of the x server saved data, so if I kill all the
processes and then use the mouse to exit x, then restart it again, the
torrents are also started again, but w/o the gui.
Suggestions anybody? Or should I call ghostbusters?
Thanks.
--
Cheers, Gene
"There are four boxes to be used in defense of liberty:
soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
I've been there.
15 years, 4 months
EeePC 701 : Is pre-upgrade not optional??
by Beartooth
I am old, physically exhausted and in lousy health. (Don't ask.)
One of the topics I've been ignoring completely, in order to manage at
least something, is pre-upgrade -- taking for granted that the way I know
would still work, be the virtues of pre-upgrade what they may.
I bit-torrented F10 and burned it to a DVD. I want it ASAP for an
EeePC 701, now running what was supposed to be F10 Beta (uname says
F9.92.), and reported to solve the wireless problem. (It didn't. In fact,
it is unable to connect, even by Ethernet cable to my router.)
My choices appear to be either to do a fresh install (which I
presume might work), DBAN the 701 and then do a fresh install, mothball
the machine, or install some less congenial OS.
Has anyone here tried any of these on a very early EeePC?
--
Beartooth Staffwright, PhD, Neo-Redneck Linux Convert
Remember I know precious little of what I am talking about.
15 years, 4 months
Evolution and F10
by ed
I upgraded from F9 to F10 without problems. However, Evolution's
behavior has changed.
In F9, I could view all my unread messages in the Unread folder and when
finished reading them, I could either hit Cntrl-E or navigate to a
different folder. Once I navigated back to the Unread folder, all the
messages would be gone.
In F10, as soon as the message is read, it disappears into it's
respective folder and I loose the preview.
Is this a bug or a new feature? I disabled allowing messages to be
marked read after N seconds, but that is not a long term solution...
Thanks
-
Ed Gurski
Linux User
# 458454 http://counter.li.org
15 years, 4 months
IBM 19K5544 Intel Pro/100 Ethernet Adapter
by Tod Thomas
I have two of these (PCI) network cards, they seem pretty nice. I'm not
sure where I got them but I was wondering if they should work with
Fedora? I plugged one in but lspci doesn't see it and trying to find it
in dmesg failed. Just trying to avoid going out and buying new cards
for an old machine I'm trying to get up and running. I have a feeling
they are IBM OEM and won't work with Linux but thought I'd check before
tossing them.
Thanks - Tod
15 years, 4 months
