Re: SELinux log

[Laura Lazzati <laura.lazzati.15@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 945 bytes --]

Hi!


* I’m repeating myself here: do *not* use enforcing mode.  Do use
>   permissive mode only.
>
Oh, sorry for this, it was the "easy" way of checking that it didn't work.
I have byobu running  now with a tail -f of the audit log.
My question was more like "I am hardcoding the path to guix -at least
before doing a guix pull -, I cannot understand why that doesn't work, even
if I did it just for trying if it solved partially why guix was not found.
On the other hand, I get:

type=AVC msg=audit(1560741907.590:426): avc:  denied  { search } for
 pid=31810 comm="which" name="gnu" dev="dm-0" ino=931548
scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
tcontext=unconfined_u:object_r:guix_daemon.guix_store_content_t:s0
tclass=dir permissive=1

Should I add something allowing commands under /usr/bin to operate over
guix? Or am I mixing things too much?


Regards :)
Laura


-- 
> Ricardo
>
>

[-- Attachment #2: Type: text/html, Size: 1474 bytes --]