SELinux is preventing sh from getattr access on the file /usr/sbin/ldconfig.

Suvayu Ali fatkasuvayu+linux at gmail.com
Mon Jun 29 11:06:28 UTC 2015


Hi Dan,

On Mon, Jun 29, 2015 at 06:09:29AM -0400, Daniel J Walsh wrote:
> On 06/28/2015 07:53 AM, Suvayu Ali wrote:
> >
> > time->Thu Jun 25 17:56:49 2015

I looked up dnf history for that time, the summary is attached.

> This is very strange.  Doing ldconfig during a package update is
> expected, but why would firewalld be executing it. 
> ps -eZ | grep firewalld

$ ps -eZ | grep firewalld
system_u:system_r:firewalld_t:s0 30369 ?       00:00:01 firewalld

Cheers,

-- 
Suvayu

Open source is the future. It sets us free.
-------------- next part --------------
Last metadata expiration check performed 1:55:21 ago on Mon Jun 29 11:05:30 2015.
Transaction ID : 622
Begin time     : Thu Jun 25 17:55:51 2015
Begin rpmdb    : 2857:553cacac80dea9f10fffd93e8fc6480853d8e1f7
End time       :            17:57:24 2015 (93 seconds)
End rpmdb      : 2857:0e02628187cf282a64ea2c04e53d7220e97d181c
User           : Suvayu Ali <user>
Return-Code    : Success
Command Line   : update
Transaction performed with:
    Installed     dnf-1.0.1-2.fc22.noarch     @updates
    Installed     rpm-4.12.0.1-11.fc22.x86_64 @updates
Packages Altered:
    Upgraded curl-7.40.0-3.fc22.x86_64                               @fedora
    Upgrade       7.40.0-5.fc22.x86_64                               @updates
    Upgraded dracut-041-10.fc22.1.x86_64                             @fedora
    Upgrade         041-14.fc22.x86_64                               @updates
    Upgraded dracut-config-rescue-041-10.fc22.1.x86_64               @fedora
    Upgrade                       041-14.fc22.x86_64                 @updates
    Upgraded dracut-network-041-10.fc22.1.x86_64                     @fedora
    Upgrade                 041-14.fc22.x86_64                       @updates
    Upgraded file-5.22-3.fc22.x86_64                                 @fedora
    Upgrade       5.22-4.fc22.x86_64                                 @updates
    Upgraded file-libs-5.22-3.fc22.x86_64                            @fedora
    Upgrade            5.22-4.fc22.x86_64                            @updates
    Upgraded firewall-applet-0.3.14.1-1.fc22.noarch                  @updates
    Upgrade                  0.3.14.2-2.fc22.noarch                  @updates
    Upgraded firewall-config-0.3.14.1-1.fc22.noarch                  @updates
    Upgrade                  0.3.14.2-2.fc22.noarch                  @updates
    Upgraded firewalld-0.3.14.1-1.fc22.noarch                        @updates
    Upgrade            0.3.14.2-2.fc22.noarch                        @updates
    Upgraded firewalld-filesystem-0.3.14.1-1.fc22.noarch             @updates
    Upgrade                       0.3.14.2-2.fc22.noarch             @updates
    Upgraded flash-plugin-11.2.202.466-release.x86_64                @adobe-linux-x86_64/21
    Upgrade               11.2.202.468-release.x86_64                @adobe-linux-x86_64
    Upgraded gdb-7.9.1-13.fc22.x86_64                                @updates
    Upgrade      7.9.1-16.fc22.x86_64                                @updates
    Upgraded gdb-doc-7.9.1-13.fc22.noarch                            @updates
    Upgrade          7.9.1-16.fc22.noarch                            @updates
    Upgraded gnome-abrt-1.2.0-1.fc22.x86_64                          @updates
    Upgrade             1.2.0-2.fc22.x86_64                          @updates
    Upgraded gnupg-1.4.19-1.fc22.x86_64                              @fedora
    Upgrade        1.4.19-2.fc22.x86_64                              @updates
    Upgraded gnupg2-2.1.4-1.fc22.x86_64                              @updates
    Upgrade         2.1.5-1.fc22.x86_64                              @updates
    Upgraded google-chrome-beta-44.0.2403.52-1.x86_64                @google-chrome
    Upgrade                     44.0.2403.61-1.x86_64                @google-chrome
    Upgraded gstreamer1-plugins-bad-free-1.4.5-2.fc22.x86_64         @fedora
    Upgrade                              1.4.5-3.fc22.x86_64         @updates
    Upgraded hpijs-1:3.15.2-9.fc22.x86_64                            @fedora
    Upgrade        1:3.15.6-1.fc22.x86_64                            @updates
    Upgraded hplip-3.15.2-9.fc22.x86_64                              @fedora
    Upgrade        3.15.6-1.fc22.x86_64                              @updates
    Upgraded hplip-common-3.15.2-9.fc22.x86_64                       @fedora
    Upgrade               3.15.6-1.fc22.x86_64                       @updates
    Upgraded hplip-compat-libs-3.15.2-9.fc22.x86_64                  @fedora
    Upgrade                    3.15.6-1.fc22.x86_64                  @updates
    Upgraded hplip-libs-3.15.2-9.fc22.x86_64                         @fedora
    Upgrade             3.15.6-1.fc22.x86_64                         @updates
    Upgraded libcurl-7.40.0-3.fc22.i686                              @fedora
    Upgraded libcurl-7.40.0-3.fc22.x86_64                            @fedora
    Upgrade          7.40.0-5.fc22.i686                              @updates
    Upgrade          7.40.0-5.fc22.x86_64                            @updates
    Upgraded libcurl-devel-7.40.0-3.fc22.x86_64                      @fedora
    Upgrade                7.40.0-5.fc22.x86_64                      @updates
    Upgraded libetonyek-0.1.2-2.fc22.x86_64                          @updates
    Upgrade             0.1.2-3.fc22.x86_64                          @updates
    Upgraded libfreehand-0.1.0-3.fc22.x86_64                         @fedora
    Upgrade              0.1.1-1.fc22.x86_64                         @updates
    Upgraded mesa-dri-drivers-10.5.4-1.20150505.fc22.i686            @fedora
    Upgraded mesa-dri-drivers-10.5.4-1.20150505.fc22.x86_64          @fedora
    Upgrade                   10.6.0-1.fc22.i686                     @updates
    Upgrade                   10.6.0-1.fc22.x86_64                   @updates
    Upgraded mesa-filesystem-10.5.4-1.20150505.fc22.i686             @fedora
    Upgraded mesa-filesystem-10.5.4-1.20150505.fc22.x86_64           @fedora
    Upgrade                  10.6.0-1.fc22.i686                      @updates
    Upgrade                  10.6.0-1.fc22.x86_64                    @updates
    Upgraded mesa-libEGL-10.5.4-1.20150505.fc22.i686                 @fedora
    Upgraded mesa-libEGL-10.5.4-1.20150505.fc22.x86_64               @fedora
    Upgrade              10.6.0-1.fc22.i686                          @updates
    Upgrade              10.6.0-1.fc22.x86_64                        @updates
    Upgraded mesa-libEGL-devel-10.5.4-1.20150505.fc22.x86_64         @fedora
    Upgrade                    10.6.0-1.fc22.x86_64                  @updates
    Upgraded mesa-libGL-10.5.4-1.20150505.fc22.i686                  @fedora
    Upgraded mesa-libGL-10.5.4-1.20150505.fc22.x86_64                @fedora
    Upgrade             10.6.0-1.fc22.i686                           @updates
    Upgrade             10.6.0-1.fc22.x86_64                         @updates
    Upgraded mesa-libGL-devel-10.5.4-1.20150505.fc22.x86_64          @fedora
    Upgrade                   10.6.0-1.fc22.x86_64                   @updates
    Upgraded mesa-libGLES-10.5.4-1.20150505.fc22.x86_64              @fedora
    Upgrade               10.6.0-1.fc22.x86_64                       @updates
    Upgraded mesa-libOSMesa-10.5.4-1.20150505.fc22.i686              @fedora
    Upgraded mesa-libOSMesa-10.5.4-1.20150505.fc22.x86_64            @fedora
    Upgrade                 10.6.0-1.fc22.i686                       @updates
    Upgrade                 10.6.0-1.fc22.x86_64                     @updates
    Upgraded mesa-libgbm-10.5.4-1.20150505.fc22.i686                 @fedora
    Upgraded mesa-libgbm-10.5.4-1.20150505.fc22.x86_64               @fedora
    Upgrade              10.6.0-1.fc22.i686                          @updates
    Upgrade              10.6.0-1.fc22.x86_64                        @updates
    Upgraded mesa-libglapi-10.5.4-1.20150505.fc22.i686               @fedora
    Upgraded mesa-libglapi-10.5.4-1.20150505.fc22.x86_64             @fedora
    Upgrade                10.6.0-1.fc22.i686                        @updates
    Upgrade                10.6.0-1.fc22.x86_64                      @updates
    Upgraded mesa-libwayland-egl-10.5.4-1.20150505.fc22.x86_64       @fedora
    Upgrade                      10.6.0-1.fc22.x86_64                @updates
    Upgraded mesa-libwayland-egl-devel-10.5.4-1.20150505.fc22.x86_64 @fedora
    Upgrade                            10.6.0-1.fc22.x86_64          @updates
    Upgraded mesa-libxatracker-10.5.4-1.20150505.fc22.x86_64         @fedora
    Upgrade                    10.6.0-1.fc22.x86_64                  @updates
    Upgraded nss-3.19.1-1.0.fc22.i686                                @updates
    Upgraded nss-3.19.1-1.0.fc22.x86_64                              @updates
    Upgrade      3.19.2-1.0.fc22.i686                                @updates
    Upgrade      3.19.2-1.0.fc22.x86_64                              @updates
    Upgraded nss-softokn-3.19.1-1.0.fc22.i686                        @updates
    Upgraded nss-softokn-3.19.1-1.0.fc22.x86_64                      @updates
    Upgrade              3.19.2-1.0.fc22.i686                        @updates
    Upgrade              3.19.2-1.0.fc22.x86_64                      @updates
    Upgraded nss-softokn-freebl-3.19.1-1.0.fc22.i686                 @updates
    Upgraded nss-softokn-freebl-3.19.1-1.0.fc22.x86_64               @updates
    Upgrade                     3.19.2-1.0.fc22.i686                 @updates
    Upgrade                     3.19.2-1.0.fc22.x86_64               @updates
    Upgraded nss-sysinit-3.19.1-1.0.fc22.x86_64                      @updates
    Upgrade              3.19.2-1.0.fc22.x86_64                      @updates
    Upgraded nss-tools-3.19.1-1.0.fc22.x86_64                        @updates
    Upgrade            3.19.2-1.0.fc22.x86_64                        @updates
    Upgraded nss-util-3.19.1-1.0.fc22.i686                           @updates
    Upgraded nss-util-3.19.1-1.0.fc22.x86_64                         @updates
    Upgrade           3.19.2-1.0.fc22.i686                           @updates
    Upgrade           3.19.2-1.0.fc22.x86_64                         @updates
    Upgraded perl-Encode-Locale-1.04-1.fc22.noarch                   @fedora
    Upgrade                     1.05-1.fc22.noarch                   @updates
    Upgraded poppler-data-0.4.7-3.fc22.noarch                        @fedora
    Upgrade               0.4.7-4.fc22.noarch                        @updates
    Upgraded python-blivet-1:1.0.9-1.fc22.noarch                     @fedora
    Upgrade                1:1.0.10-1.fc22.noarch                    @updates
    Upgraded python-firewall-0.3.14.1-1.fc22.noarch                  @updates
    Upgrade                  0.3.14.2-2.fc22.noarch                  @updates
    Upgraded python-magic-5.22-3.fc22.noarch                         @fedora
    Upgrade               5.22-4.fc22.noarch                         @updates
    Upgraded python3-firewall-0.3.14.1-1.fc22.noarch                 @updates
    Upgrade                   0.3.14.2-2.fc22.noarch                 @updates
    Upgraded sane-backends-libs-1.0.24-13.fc22.x86_64                @fedora
    Upgrade                     1.0.24-14.fc22.x86_64                @updates
    Upgraded system-config-users-1.3.6-1.fc22.noarch                 @fedora
    Upgrade                      1.3.7-1.fc22.noarch                 @updates
    Upgraded tigervnc-license-1.4.3-4.fc22.noarch                    @fedora
    Upgrade                   1.4.3-7.fc22.noarch                    @updates
    Upgraded tigervnc-server-minimal-1.4.3-4.fc22.x86_64             @fedora
    Upgrade                          1.4.3-7.fc22.x86_64             @updates
Scriptlet output:
   1 Redirecting to /bin/systemctl start  atd.service


More information about the users mailing list