From mboxrd@z Thu Jan  1 00:00:00 1970
From: Ricardo Wurmus <rekado@elephly.net>
Subject: Re: SELinux log
Date: Wed, 12 Jun 2019 08:42:49 +0200
Message-ID: <87h88v9udy.fsf@elephly.net>
References: <CAPNLzUMak3sEm53s=DScGaKSG2ffx6dbPs6aMkpetNzW+5g11A@mail.gmail.com>
 <87sgsocqx5.fsf@elephly.net>
 <CAPNLzUNS-zJTEDWFz8JAgXM5UXM--aiPw_fBn6zTpq+mHfNt4w@mail.gmail.com>
 <87k1dyk33n.fsf@elephly.net>
 <CAPNLzUNRchOyMV=t1guAUcPr+Wg6Ho1pTXeNEYYxhJVod8atYw@mail.gmail.com>
 <87ef4586oh.fsf@elephly.net>
 <CAPNLzUPCGCvVbS=pcHi_9_TY8J9tBTME2aGhu6269HB+TiwJdg@mail.gmail.com>
 <CAPNLzUM3o0irXqsdPMj+utjpPsPas2qHwKVRDJo=N9u5mynpZg@mail.gmail.com>
 <CAPNLzUMu=LYRxc_c5fJAmFv+Ef7nk8iBXUF1ZAGqsjypGk+vgQ@mail.gmail.com>
 <87a7es8spi.fsf@elephly.net>
 <CAPNLzUNbWzw2NkA+n-jxtY5XZcpb_OaxhWprcbwTdbcZg8kMTQ@mail.gmail.com>
 <87r284cer2.fsf@elephly.net>
 <CAPNLzUNiKiz7rT=vN+PtRVmUj97WftH3rPgmumtZdDFyK9kwpw@mail.gmail.com>
 <87muisc8x8.fsf@elephly.net>
 <CAPNLzUPpzp2PL+k3zw_4FaBpO_4VT8T1PYnUHJaV1B_xzRvmOw@mail.gmail.com>
 <CAPNLzUMdJa1nbOeqQLpz9WG==2F=WfbXN052fPOVnd9=-S--Ow@mail.gmail.com>
 <87ef41dfkc.fsf@elephly.net>
 <CAPNLzUN6WD+Y8uKkNGbLDffeZmiaemB9DRDwqRfXaD5zS5VKUA@mail.gmail.com>
 <87tvcw9upi.fsf@elephly.net>
 <CAPNLzUOJ3ajGa+vKs6MTOaODgktjt3NpLyNRTmhMvR5_9Z3-Yw@mail.gmail.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
Return-path: <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
Received: from eggs.gnu.org ([2001:470:142:3::10]:38810)
 by lists.gnu.org with esmtp (Exim 4.86_2)
 (envelope-from <rekado@elephly.net>) id 1hawyP-0000Lc-Ca
 for guix-devel@gnu.org; Wed, 12 Jun 2019 02:43:06 -0400
Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71)
 (envelope-from <rekado@elephly.net>) id 1hawyL-0005wL-7l
 for guix-devel@gnu.org; Wed, 12 Jun 2019 02:43:03 -0400
Received: from sender4-of-o53.zoho.com ([136.143.188.53]:21322)
 by eggs.gnu.org with esmtps (TLS1.0:RSA_AES_256_CBC_SHA1:32)
 (Exim 4.71) (envelope-from <rekado@elephly.net>) id 1hawyJ-0005t3-Gw
 for guix-devel@gnu.org; Wed, 12 Jun 2019 02:43:00 -0400
In-reply-to: <CAPNLzUOJ3ajGa+vKs6MTOaODgktjt3NpLyNRTmhMvR5_9Z3-Yw@mail.gmail.com>
List-Id: "Development of GNU Guix and the GNU System distribution."
 <guix-devel.gnu.org>
List-Unsubscribe: <https://lists.gnu.org/mailman/options/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=unsubscribe>
List-Archive: <https://lists.gnu.org/archive/html/guix-devel>
List-Post: <mailto:guix-devel@gnu.org>
List-Help: <mailto:guix-devel-request@gnu.org?subject=help>
List-Subscribe: <https://lists.gnu.org/mailman/listinfo/guix-devel>,
 <mailto:guix-devel-request@gnu.org?subject=subscribe>
Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org
Sender: "Guix-devel" <guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org>
To: Laura Lazzati <laura.lazzati.15@gmail.com>
Cc: Guix-devel <guix-devel@gnu.org>


Laura Lazzati <laura.lazzati.15@gmail.com> writes:

> I added the lines to a copy of guix-daemon.cil which I got from cloning
> guix and placed it in root's home.

Which lines?  All of the changes I described were not necessarily ready
for inclusion.  They were all untested.

> Since everything was messy (/gnu had  d?????????? as permissions as well =
as
> all the fields listed with `ls -l`, and could not solve it, even trying to
> delete it ), I restored my VM to the point prior to adding the policy and
> loading the module.
> There i ran semodule, using the new file,  created the .autorelabel file
> and rebooted. It labeled everything, but I still can't run guix, and /gnu
> dir again ended with these weird permisions:
> d??????????   ? ?    ?        ?            ? gnu

This probably just means that there is no context permissions for =E2=80=9C=
ls=E2=80=9D
to access /gnu.  Another =E2=80=9Callow=E2=80=9D rule may be required to pe=
rmit
read-only access on /gnu to any process.

--
Ricardo