F30 logwatch gets selinux error
by Robert Moskowitz
I get this error every few days. Is this some permission I have not set
or a bug to report:
SELinux is preventing mkdir from using the dac_override capability.
***** Plugin dac_override (91.4 confidence) suggests **********************
If you want to help identify if domain needs this access or you have a
file with the wrong permissions on your system
Then turn on full auditing to get path information about the offending
file and generate the error again.
Do
Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.
***** Plugin catchall (9.59 confidence) suggests **************************
If you believe that mkdir should have the dac_override capability by
default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'mkdir' --raw | audit2allow -M my-mkdir
# semodule -X 300 -i my-mkdir.pp
Additional Information:
Source Context system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
Target Context system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
Target Objects Unknown [ capability ]
Source mkdir
Source Path mkdir
Port <Unknown>
Host lx140e.htt-consult.com
Source RPM Packages
Target RPM Packages
Policy RPM selinux-policy-3.14.3-43.fc30.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name lx140e.htt-consult.com
Platform Linux lx140e.htt-consult.com
5.2.8-200.fc30.x86_64
#1 SMP Sat Aug 10 13:21:39 UTC 2019
x86_64 x86_64
Alert Count 145
First Seen 2019-06-26 03:29:06 EDT
Last Seen 2019-08-21 03:13:07 EDT
Local ID 94d550fd-c6a6-4fd9-aad1-30548760cfe0
Raw Audit Messages
type=AVC msg=audit(1566371587.548:885): avc: denied { dac_override }
for pid=1145 comm="sendmail" capability=1
scontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
tcontext=system_u:system_r:logwatch_mail_t:s0-s0:c0.c1023
tclass=capability permissive=0
Hash: mkdir,logwatch_mail_t,logwatch_mail_t,capability,dac_override
1 hour, 51 minutes
kswapd?
by Tom Horsley
I have vast amounts of free memory, yet I keep catching kswapd
running at 100% every so often. Top also says I'm using
a tiny bit of swap (for no reason I can fathom):
MiB Mem : 15976.1 total, 979.6 free, 723.4 used, 14273.1 buff/cache
MiB Swap: 32767.0 total, 32680.5 free, 86.5 used. 14920.2 avail Mem
This is with kernel 5.2.8-200.fc30.x86_64
I never noticed this before. Anyone know what is going on?
8 hours, 21 minutes
NFS mount fails -
by Bob Goodwin
After what appears to be an equipment failure I am having trouble
getting a new server connected to a client. After trying whatever I can
think of the client still does:
[root@bobg bobg]# mount 192.168.2.128 /mnt/testb
mount: /mnt/testb: special device 192.168.2.128 does not exist.
While ssh shows:
[bobg@localhost-live ~]$ ll /etc/exports
-rw-r--r--. 1 root root 41 Aug 20 12:30 /etc/exports
Any suggestions.thoughts?
Bob
--
Bob Goodwin - Zuni, Virginia, USA
http://www.qrz.com/db/W2BOD
box83 FEDORA-30/64bit LINUX XFCE Fastmail POP3
10 hours, 55 minutes
F30: latest kernel no external monitor
by Gianluca Cecchi
Hello,
executed "dnf update" after about 15 days of inactivity.
Updates has brought in kernel 5.2.8-200.fc30.x86_64
But after reboot the system is not able to detect (in the sense of no
monitor connection at all seen) when connecting a 24" Dell monitor using an
usb-c to hdmi adapter on my laptop and then connecting an HDMI-to-dvi cable
to the monitor, that I normally used before.
Tried to reboot two times without effect.
As soon as I restart with previous kernel 5.1.20-300.fc30.x86_64, external
monitor detection and usage is ok again.
This is in default Gnome environment and Wayland.
Eg in gnome terminal I have:
$ loginctl show-session 2 -p Type
Type=wayland
and
$ echo $WAYLAND_DISPLAY
wayland-0
Anyone else with similar problems?
If you point me on how to get related log lines in journal in both working
and not working configurations, I can get more info.
Seen on several threads that with Xwayland and gnome-shell not so easy to
see startup log files...
Thanks in advance,
Gianluca
14 hours, 41 minutes
F30 wheel mouse oddness
by Richard Shaw
Ever since upgrading to F30 when I first reboot my wheel mouse only moves
in VERY small increments and at some point later it returns to "normal"
Anyone else seen this?
Logitech M705...
Thanks,
Richard
20 hours, 41 minutes
List all packages which have a build requirement on package foo
by Stefan Schulze Frielinghaus
Hi all,
How can I list all packages which have a *build* requirement on package
foo? AFAIK build requirements are not stored as meta data in RPM files.
Thus, repoquery won't help. The only option I am aware of would be to
download all SPEC files and search for build requirements manually. Any
other ideas? If not, is there a central repository of all SPEC files?
The use case is that I would like to find out which package depends on
package foo. The "normal" / runtime dependencies, i.e.,
Requires: foo
can be queried via repoquery. However, it is unclear to me how to list
packages which have a build requirement, i.e.,
BuildRequires: foo
on package foo.
Cheers,
Stefan
2 days, 1 hour
Error starting domain: Requested operation is not valid: network
'default' is not active
by Patrick O'Callaghan
The above only happens when SElinux is Enabled. When Disabled,
everything works. The same happens on both my VMs (Fedora and Windows).
Looking at https://wiki.libvirt.org/page/Networking I tried:
# virsh net-list --all
Name State Autostart Persistent
----------------------------------------------
default inactive yes yes
# virsh net-start default
error: Failed to start network default
error: internal error: Child process (VIR_BRIDGE_NAME=virbr0 /usr/sbin/dnsmasq --conf-file=/var/lib/libvirt/dnsmasq/default.conf --leasefile-ro --dhcp-script=/usr/libexec/libvirt_leaseshelper) unexpected exit status 11:
dnsmasq: lease-init script returned exit code 1
I run my own dnsmasq (and QEMU/KVM runs its own dnsmasq separately) but
this has not been an issue recently.
# cat /var/lib/libvirt/dnsmasq/default.conf
##WARNING: THIS IS AN AUTO-GENERATED FILE. CHANGES TO IT ARE LIKELY TO
BE
##OVERWRITTEN AND LOST. Changes to this configuration should be made
using:
## virsh net-edit default
## or other application using the libvirt API.
##
## dnsmasq conf file created by libvirt
strict-order
pid-file=/var/run/libvirt/network/default.pid
except-interface=lo
bind-dynamic
interface=virbr0
dhcp-range=192.168.122.2,192.168.122.254,255.255.255.0
dhcp-no-override
dhcp-authoritative
dhcp-lease-max=253
dhcp-hostsfile=/var/lib/libvirt/dnsmasq/default.hostsfile
addn-hosts=/var/lib/libvirt/dnsmasq/default.addnhosts
Ideas on what's causing this would be welcome.
poc
2 days, 4 hours
Question on missing file from syslinux rpm?
by Michael D. Setzer II
I use syslinux in the g4l project I've maintained since 2004, and noticed that
Fedora 30 includes the later 6.04 version versus the latest full released 6.03
version. Did a test, and noted that all the files except display.c32 are included
with the fedora 30? Note sure if it was left out for a reason, or by accident?
Sent emails to the two email address that were in the info I found on the rpm
at fedora project, but haven't gotten an answer from either yet?
Doesn't greatly effect project, since booting works, but if user wants to drop
to boot prompt, it was the only option to be able to examine text files.
Thanks.
+------------------------------------------------------------+
Michael D. Setzer II - Computer Science Instructor (Retired)
mailto:mikes@guam.net
mailto:msetzerii@gmail.com
Guam - Where America's Day Begins
G4L Disk Imaging Project maintainer
http://sourceforge.net/projects/g4l/
+------------------------------------------------------------+
http://setiathome.berkeley.edu (Original)
Number of Seti Units Returned: 19,471
Processing time: 32 years, 290 days, 12 hours, 58 minutes
(Total Hours: 287,489)
BOINC@HOME CREDITS
ROSETTA 66311323.990119 | ABC 16613838.513356
SETI 109804121.703177 | EINSTEIN 141859222.999240
2 days, 13 hours
about dnf install with multi arch
by Changqing Li
Hi,
Hopefully this is the right place to ask this, if not, please kind to
tell me.
I want to know does archs in /etc/dnf/vars/arch have same priority?
Here is problem I met:
under the repo, there are packageA.arch1.rpm which provide C and others,
also have packageB.arch2.rpm also provide C
1. if etc/dnf/vars/arch configed as arch1:arch2:arch3:arch4
dnf install packageA packageB will success, seems arch1 is high
priority than arch2, so packageA is installed, packageB is skipped
2. if etc/dnf/vars/arch configed as arch2:arch3:arch1:arch4
dnf install packageA packageB will fail with below error:
packageA.arch1 conflicts with C provided by packageB.arch2
conflict request
I am confused, if the first arch with highest priority, why in
condition 2 conflict request is reported? Not package B is installed
and PackageB is skipped?
Is it related with the content of package A/B? Can anyone explain how
the conflict is detected? Thanks in advance.
--
BRs
Sandy(Li Changqing)
2 days, 20 hours
Loopback mount in fstab fails
by Patrick O'Callaghan
I'm trying to rationalise space by moving my /var directory from its
own partition to /, as currently there's a lot of wastage. I've copied
/var to /newvar with rsync, and now want to mount /newvar as /var on
reboot by creating an entry in /etc/fstab. This is it (using /var-tst
for testing):
/newvar /var-tst ext4 loop 0 0
but I'm getting:
mount: /var-tst: failed to setup loop device for /newvar.
/var-tst exists, so that's the problem? The man page for mount states
that it will create the necessary /dev loopback device if it isn't
specified. Currently there are no loopback devices in the system, and
the loop kernel module is loaded.
poc
PS Suggestions on how to move /var without all this jiggery-pokery are
also welcome.
3 days, 23 hours
