CIao a tutti, da qualche giorno ho un alert che fa crashare il sistema e devo ogni volta rieseguire il login,
Non so se devo ignorarlo, suggerimenti?
[code] SELinux is preventing abrt-action-sav from write access on the file /var/lib/rpm/.dbenv.lock.
***** Plugin restorecon (99.5 confidence) suggests ************************
If you want to fix the label.
/var/lib/rpm/.dbenv.lock default label should be rpm_var_lib_t.
Then you can run restorecon. The access attempt may have been stopped due to insufficient permissions to access a parent directory in which case try to change the following command accordingly.
Do
/sbin/restorecon -v /var/lib/rpm/.dbenv.lock
***** Plugin catchall (1.49 confidence) suggests **************************
If you believe that abrt-action-sav should be allowed write access on the .dbenv.lock file by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
ausearch -c ‘abrt-action-sav’ --raw | audit2allow -M my-abrtactionsav
semodule -X 300 -i my-abrtactionsav.pp
Additional Information:
Source Context system_u:system_r:abrt_t:s0-s0:c0.c1023
Target Context unconfined_u:object_r:var_lib_t:s0
Target Objects /var/lib/rpm/.dbenv.lock file ]
Source abrt-action-sav
Source Path abrt-action-sav
Port
Host localhost.localdomain
Source RPM Packages
Target RPM Packages
Policy RPM
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name localhost.localdomain
Platform Linux localhost.localdomain 4.20.5-200.fc29.x86_64
#1 SMP Mon Jan 28 19:29:17 UTC 2019 x86_64 x86_64
Alert Count 122
First Seen 2019-02-03 21:51:23 CET
Last Seen 2019-02-03 21:51:23 CET
Local ID 18eb2582-1726-416e-8e5b-330241715daf
Raw Audit Messages
type=AVC msg=audit(1549227083.782:5738): avc: denied { write } for pid=15605 comm=“abrt-action-lis” name=".dbenv.lock" dev=“dm-1” ino=2638301 scontext=system_u:system_r:abrt_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:var_lib_t:s0 tclass=file permissive=0
Hash: abrt-action-sav,abrt_t,var_lib_t,file,write .[/code]