Re: F28 - K3b failure on image copy

[Robert Moskowitz]

But gdhadow did get updated:

grep rgm gshadow
wheel:::rgm
cdrom:::rgm
rgm:!::

More confusion.  :(

On 05/29/2018 05:22 PM, Robert Moskowitz wrote:
> On 05/29/2018 05:17 PM, Rex Dieter wrote:
> > Robert Moskowitz wrote:
> > > Seems the error is that my user needs to be added to group cdrom. This
> > > was not the case in the past...
> >
> > That should not be required now either.  Mind filing a bug?
>
> I will work on getting into bugzilla.  Also got the following. Perhaps 
> when I tried to add me to cdrom with the usrmod command from su..
>
> SELinux is preventing pool from getattr access on the file /etc/gshadow.
>
> *****  Plugin catchall (100. confidence) suggests
>
> If you believe that pool should be allowed getattr access on the 
> gshadow file by default.
> Then you should report this as a bug.
> You can generate a local policy module to allow this access.
> Do
> allow this access for now by executing:
> # ausearch -c 'pool' --raw | audit2allow -M my-pool
> # semodule -X 300 -i my-pool.pp
>
> Additional Information:
> Source Context unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023
> Target Context                system_u:object_r:shadow_t:s0
> Target Objects                /etc/gshadow [ file ]
> Source                        pool
> Source Path                   pool
> Port                          <Unknown>
> Host                          lx121e.htt-consult.com
> Source RPM Packages
> Target RPM Packages           setup-2.11.4-1.fc28.noarch
> Policy RPM                    selinux-policy-3.14.1-29.fc28.noarch
> Selinux Enabled               True
> Policy Type                   targeted
> Enforcing Mode                Enforcing
> Host Name                     lx121e.htt-consult.com
> Platform                      Linux lx121e.htt-consult.com
>                               4.16.11-300.fc28.x86_64 #1 SMP Tue May 
> 22 18:29:09
>                               UTC 2018 x86_64 x86_64
> Alert Count                   2
> First Seen                    2018-05-29 17:13:56 EDT
> Last Seen                     2018-05-29 17:13:56 EDT
> Local ID                      b3355fe8-15e5-4422-9ccf-8794cd452416
>
> Raw Audit Messages
> type=AVC msg=audit(1527628436.92:843): avc:  denied  { getattr } for  
> pid=11867 comm="pool" path="/etc/gshadow" dev="sda3" ino=140981 
> scontext=unconfined_u:unconfined_r:thumb_t:s0-s0:c0.c1023 
> tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=0
>
> Hash: pool,thumb_t,shadow_t,file,getattr
> > -- Rex
> > > On 05/29/2018 04:53 PM, Robert Moskowitz wrote:
> > > > First time using K3b on this system. Plugged the DVD/RW in.  Copied
> > > > the CD no problem but the write failed:
> > > > Devices
> > > >
> > > > SONY DVD RW DRU-840A SS01 (/dev/sr0, CD-R, CD-RW, CD-ROM, DVD-ROM,
> > > > DVD-R, DVD-RW, DVD-R DL, DVD+R, DVD+RW, DVD+R DL) [DVD-ROM, DVD-R
> > > > Sequential, DVD-R Dual Layer Sequential, DVD-R Dual Layer Jump,
> > > > DVD-RAM, DVD-RW Restricted Overwrite, DVD-RW Sequential, DVD+RW,
> > > > DVD+R, DVD+R Dual Layer, CD-ROM, CD-R, CD-RW] [SAO, TAO, RAW,
> > > > SAO/R96P, SAO/R96R, RAW/R16, RAW/R96P, RAW/R96R, Restricted Overwrite,
> > > > Layer Jump] [%7]
> > > > System
> > > >
> > > > K3b Version: 17.12.3
> > > > KDE Version: 5.44.0
> > > > Qt Version:  5.10.1
> > > > Kernel:      4.16.11-300.fc28.x86_64
> > > > Used versions
> > > >
> > > > cdrecord: 1.1.11
> > > > cdrecord
> > > >
> > > > /usr/bin/wodim: Operation not permitted. Warning: Cannot raise
> > > > RLIMIT_MEMLOCK limits.
> > > > scsidev: '/dev/sr0'
> > > > devname: '/dev/sr0'
> > > > scsibus: -2 target: -2 lun: -2
> > > > /usr/bin/wodim: Cannot allocate memory.
> > > > Cannot open SCSI driver!
> > > > For possible targets try 'wodim --devices' or 'wodim -scanbus'.
> > > > For possible transport specifiers try 'wodim dev=help'.
> > > > For IDE/ATAPI devices configuration, see the file 
> > > > README.ATAPI.setup from
> > > > the wodim documentation.
> > > > TOC Type: 0 = CD-DA
> > > > cdrecord command:
> > > >
> > > > /usr/bin/wodim -v gracetime=2 dev=/dev/sr0 speed=40 -raw96r
> > > > driveropts=burnfree -text -useinfo -audio -shorttrack
> > > > /home/rgm/Videos/k3bCdCopy0/Track01.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track02.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track03.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track04.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track05.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track06.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track07.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track08.wav
> > > > /home/rgm/Videos/k3bCdCopy0/Track09.wav
> >
> > users mailing list -- [e-mail]
> > To unsubscribe send an email to [e-mail]
> > Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> > List Archives: 
> > https://lists.fedoraproject.org/archives/list/[e-mail]/...
>
> users mailing list -- [e-mail]
> To unsubscribe send an email to [e-mail]
> Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: 
> https://lists.fedoraproject.org/archives/list/[e-mail]/...