FAQ Search Today's Posts Mark Forums Read
» Video Reviews

» Linux Archive

Linux-archive is a website aiming to archive linux email lists and to make them easily accessible for linux users/developers.


» Sponsor

» Partners

» Sponsor

Go Back   Linux Archive > Redhat > Fedora User

 
 
LinkBack Thread Tools
 
Old 03-21-2012, 10:28 AM
Marko Vojinovic
 
Default Timezones and SELinux...

Hi folks!

// This is a repost from the KDE mailing list, with the hope that more eyes
will see it here... //

After the yum update, both before and after the restart of the system (there
was a new kernel as well), my timezone setting is wrong (again) --- it is set
to Lisbon (GMT), which was my previous setting, rather than Belgrade (GMT+1)
which was my current setting (prior to update). AFAIK, this should not happen
unless I ask for the timezone change.

Second, when I open systemsettings to change the timezone, after clicking
"apply" and giving the root password, the timezone change fails, and SELinux
gives an alert:

===== long quote =====
SELinux is preventing /usr/libexec/kde4/kcmdatetimehelper from using the
dac_override capability.

***** Plugin dac_override (91.4 confidence) suggests ***********************

If you want to help identify if domain needs this access or you have a file
with the wrong permissions on your system
Then turn on full auditing to get path information about the offending file and
generate the error again.
Do

Turn on full auditing
# auditctl -w /etc/shadow -p w
Try to recreate AVC. Then execute
# ausearch -m avc -ts recent
If you see PATH record check ownership/permissions on file, and fix it,
otherwise report as a bugzilla.

***** Plugin catchall (9.59 confidence) suggests ***************************

If you believe that kcmdatetimehelper should have the dac_override capability
by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# grep kcmdatetimehelp /var/log/audit/audit.log | audit2allow -M mypol
# semodule -i mypol.pp

Additional Information:
Source Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Context system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
Target Objects [ capability ]
Source kcmdatetimehelp
Source Path /usr/libexec/kde4/kcmdatetimehelper
Port <Unknown>
Host Yoda
Source RPM Packages kde-workspace-4.8.1-6.fc16.x86_64
Target RPM Packages
Policy RPM selinux-policy-3.10.0-75.fc16.noarch
Selinux Enabled True
Policy Type targeted
Enforcing Mode Enforcing
Host Name Yoda
Platform Linux Yoda 3.2.10-3.fc16.x86_64 #1 SMP Thu Mar
15
19:39:46 UTC 2012 x86_64 x86_64
Alert Count 1
First Seen Mon 19 Mar 2012 08:00:25 AM WET
Last Seen Mon 19 Mar 2012 08:00:25 AM WET
Local ID 6c829d68-d5d6-4696-b636-f6efa26b8b49

Raw Audit Messages
type=AVC msg=audit(1332144025.273:73): avc: denied { dac_override } for
pid=2173 comm="kcmdatetimehelp" capability=1
scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability


type=SYSCALL msg=audit(1332144025.273:73): arch=x86_64 syscall=access
success=no exit=EACCES a0=1db33d8 a1=2 a2=200 a3=0 items=0 ppid=1 pid=2173
auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0
tty=(none) ses=4294967295 comm=kcmdatetimehelp
exe=/usr/libexec/kde4/kcmdatetimehelper
subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)

Hash: kcmdatetimehelp,gnomeclock_t,gnomeclock_t,capabili ty,dac_override

audit2allow

#============= gnomeclock_t ==============
allow gnomeclock_t self:capability dac_override;

audit2allow -R

#============= gnomeclock_t ==============
allow gnomeclock_t self:capability dac_override;

===== end of long quote =====

Somehow I feel that I am not supposed to tweak SELinux policy in order to
change my timezone setting. In the past I would put SELinux into permissive
mode, change the timezone, and then re-enforce SELinux. But the issue keeps
reappearing, so I don't believe that this is the right solution.

Ideas?

Best, :-)
Marko


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-21-2012, 12:01 PM
Daniel J Walsh
 
Default Timezones and SELinux...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/21/2012 07:28 AM, Marko Vojinovic wrote:
>
> Hi folks!
>
> // This is a repost from the KDE mailing list, with the hope that
> more eyes will see it here... //
>
> After the yum update, both before and after the restart of the
> system (there was a new kernel as well), my timezone setting is
> wrong (again) --- it is set to Lisbon (GMT), which was my previous
> setting, rather than Belgrade (GMT+1) which was my current setting
> (prior to update). AFAIK, this should not happen unless I ask for
> the timezone change.
>
> Second, when I open systemsettings to change the timezone, after
> clicking "apply" and giving the root password, the timezone change
> fails, and SELinux gives an alert:
>
> ===== long quote ===== SELinux is preventing
> /usr/libexec/kde4/kcmdatetimehelper from using the dac_override
> capability.
>
> ***** Plugin dac_override (91.4 confidence) suggests
> ***********************
>
> If you want to help identify if domain needs this access or you
> have a file with the wrong permissions on your system Then turn on
> full auditing to get path information about the offending file and
> generate the error again. Do
>
> Turn on full auditing # auditctl -w /etc/shadow -p w Try to
> recreate AVC. Then execute # ausearch -m avc -ts recent If you see
> PATH record check ownership/permissions on file, and fix it,
> otherwise report as a bugzilla.
>
> ***** Plugin catchall (9.59 confidence) suggests
> ***************************
>
> If you believe that kcmdatetimehelper should have the dac_override
> capability by default. Then you should report this as a bug. You
> can generate a local policy module to allow this access. Do allow
> this access for now by executing: # grep kcmdatetimehelp
> /var/log/audit/audit.log | audit2allow -M mypol # semodule -i
> mypol.pp
>
> Additional Information: Source Context
> system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 Target Context
> system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 Target Objects
> [ capability ] Source kcmdatetimehelp Source
> Path /usr/libexec/kde4/kcmdatetimehelper Port
> <Unknown> Host Yoda Source RPM Packages
> kde-workspace-4.8.1-6.fc16.x86_64 Target RPM Packages Policy RPM
> selinux-policy-3.10.0-75.fc16.noarch Selinux Enabled
> True Policy Type targeted Enforcing Mode
> Enforcing Host Name Yoda Platform
> Linux Yoda 3.2.10-3.fc16.x86_64 #1 SMP Thu Mar 15 19:39:46 UTC 2012
> x86_64 x86_64 Alert Count 1 First Seen
> Mon 19 Mar 2012 08:00:25 AM WET Last Seen Mon
> 19 Mar 2012 08:00:25 AM WET Local ID
> 6c829d68-d5d6-4696-b636-f6efa26b8b49
>
> Raw Audit Messages type=AVC msg=audit(1332144025.273:73): avc:
> denied { dac_override } for pid=2173 comm="kcmdatetimehelp"
> capability=1 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
> tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023
> tclass=capability
>
>
> type=SYSCALL msg=audit(1332144025.273:73): arch=x86_64
> syscall=access success=no exit=EACCES a0=1db33d8 a1=2 a2=200 a3=0
> items=0 ppid=1 pid=2173 auid=4294967295 uid=0 gid=0 euid=0 suid=0
> fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295
> comm=kcmdatetimehelp exe=/usr/libexec/kde4/kcmdatetimehelper
> subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)
>
> Hash:
> kcmdatetimehelp,gnomeclock_t,gnomeclock_t,capabili ty,dac_override
>
> audit2allow
>
> #============= gnomeclock_t ============== allow gnomeclock_t
> self:capability dac_override;
>
> audit2allow -R
>
> #============= gnomeclock_t ============== allow gnomeclock_t
> self:capability dac_override;
>
> ===== end of long quote =====
>
> Somehow I feel that I am not supposed to tweak SELinux policy in
> order to change my timezone setting. In the past I would put
> SELinux into permissive mode, change the timezone, and then
> re-enforce SELinux. But the issue keeps reappearing, so I don't
> believe that this is the right solution.
>
> Ideas?
>
> Best, :-) Marko
>
>


dac_overrride means that you have a process running as root trying to
modify a file that is not owned by root. Usually this means you have
a file with the incorrect ownership.

Now the audit log did not give you the full path, but you can get it
by following the instructions detailed here.

http://danwalsh.livejournal.com/34903.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9p0UMACgkQrlYvE4MpobPobgCfaaXlRCLyNT m37Q3Q4cx752o8
y/UAnA7PDTOpOOs3cWS1Ap7oXqB1Uft0
=MPKZ
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-21-2012, 01:25 PM
Marko Vojinovic
 
Default Timezones and SELinux...

On Wednesday, 21. March 2012. 9.01.55 you wrote:
> On 03/21/2012 07:28 AM, Marko Vojinovic wrote:
> >
> > After the yum update, both before and after the restart of the
> > system (there was a new kernel as well), my timezone setting is
> > wrong (again) --- it is set to Lisbon (GMT), which was my previous
> > setting, rather than Belgrade (GMT+1) which was my current setting
> > (prior to update). AFAIK, this should not happen unless I ask for
> > the timezone change.
> >
> > Second, when I open systemsettings to change the timezone, after
> > clicking "apply" and giving the root password, the timezone change
> > fails, and SELinux gives an alert:
>
> dac_overrride means that you have a process running as root trying to
> modify a file that is not owned by root. Usually this means you have
> a file with the incorrect ownership.
>
> Now the audit log did not give you the full path, but you can get it
> by following the instructions detailed here.
>
> http://danwalsh.livejournal.com/34903.html

Thanks Dan! I followed your advice on that page and managed to track down
several files in my system with the wrong context. A restorecon on that files
fixed the problem. Just to be on the safe side, I did a systemwide restorecon,
and fixed some additional files...

Timezone can now be changed successfully. :-)

Best, :-)
Marko



--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-26-2012, 03:42 PM
enclair
 
Default Timezones and SELinux...

Le 21 mars 2012 15:25, Marko Vojinovic <vvmarko@gmail.com> a écrit :

Thanks Dan! I followed your advice on that page and managed to track down

several files in my system with the wrong context. A restorecon on that files

fixed the problem. Just to be on the safe side, I did a systemwide restorecon,

and fixed some additional files...



Timezone can now be changed successfully. :-)



Best, :-)

Marko
Hi, I can't change date and time, I think it's the same problem, can you tell me on which files did you do that?
How do you do "systemwide restorecon"?


Thanks
*

--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-27-2012, 02:36 PM
Daniel J Walsh
 
Default Timezones and SELinux...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/26/2012 11:42 AM, enclair wrote:
> Le 21 mars 2012 15:25, Marko Vojinovic <vvmarko@gmail.com
> <mailto:vvmarko@gmail.com>> a écrit :
>
> Thanks Dan! I followed your advice on that page and managed to
> track down several files in my system with the wrong context. A
> restorecon on that files fixed the problem. Just to be on the safe
> side, I did a systemwide restorecon, and fixed some additional
> files...
>
> Timezone can now be changed successfully. :-)
>
> Best, :-) Marko
>
>
> Hi, I can't change date and time, I think it's the same problem,
> can you tell me on which files did you do that? How do you do
> "systemwide restorecon"?
>
> Thanks
>
>
>

fixfiles restore

Will relabel the entire system.

Are you seeing avc messages when you try to change the date/time.

ausearch -m avc -ts recent

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9x0FUACgkQrlYvE4MpobMe8ACg5j4M3ICSWy 0aFlTlPTBrVDTW
XmEAnjltdQZk4wwjf3NTVsV5+ff6R1XM
=xRMl
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-27-2012, 07:11 PM
enclair
 
Default Timezones and SELinux...

Le 27 mars 2012 16:36, Daniel J Walsh <dwalsh@redhat.com> a écrit :


Are you seeing avc messages when you try to change the date/time.



ausearch -m avc -ts recent

Yes I am:

time->Tue Mar 27 21:07:27 2012
type=AVC msg=audit(1332875247.972:80): avc:* denied* { dac_override } for* pid=1962 comm="kcmdatetimehelp" capability=1* scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability


However I don't use a normal configuration. My /home is mounted with the bind option of mount, I don't know if it can be related.


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-27-2012, 08:52 PM
Daniel J Walsh
 
Default Timezones and SELinux...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/27/2012 03:11 PM, enclair wrote:
> Le 27 mars 2012 16:36, Daniel J Walsh <dwalsh@redhat.com <mailto:dwalsh@redhat.com>> a écrit :
>
> Are you seeing avc messages when you try to change the date/time.
>
> ausearch -m avc -ts recent
>
>
> Yes I am:
>
> time->Tue Mar 27 21:07:27 2012 type=AVC msg=audit(1332875247.972:80): avc: denied { dac_override } for pid=1962 comm="kcmdatetimehelp" capability=1 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability
>
> However I don't use a normal configuration. My /home is mounted with the bind option of mount, I don't know if it can be related.
>
>
>

Doubt it but did you try what I wrote to the first reporter?

>
> dac_overrride means that you have a process running as root trying to modify a file that is not owned by root. Usually this means you have a file with the incorrect ownership.
>
> Now the audit log did not give you the full path, but you can get it by following the instructions detailed here.
>
> http://danwalsh.livejournal.com/34903.html

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9yKKEACgkQrlYvE4MpobNTNACgyjShlg5HwN xEZhEyMs2FQ2iz
hmkAoL/dVKImZPEjcrrjXZ2z3EUOEyiD
=44Jf
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-27-2012, 09:45 PM
enclair
 
Default Timezones and SELinux...

Le 27 mars 2012 22:52, Daniel J Walsh <dwalsh@redhat.com> a écrit :

Doubt it but did you try what I wrote to the first reporter?



>

> dac_overrride means that you have a process running as root trying to modify a file that is not owned by root. *Usually this means you have a file with the incorrect ownership.

>

> Now the audit log did not give you the full path, but you can get it by following the instructions detailed here.

>

> http://danwalsh.livejournal.com/34903.html

I've turned on full auditing and I have:

# ausearch -m avc -ts recent

----
time->Tue Mar 27 23:23:42 2012
type=PATH msg=audit(1332883422.739:90): item=0 name="/.config" inode=2 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_ubject_r:root_t:s0
type=CWD msg=audit(1332883422.739:90):* cwd="/"

type=SYSCALL msg=audit(1332883422.739:90): arch=40000003 syscall=39 success=no exit=-13 a0=8c1a4a8 a1=1ff a2=419f24bc a3=8 items=1 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kcmdatetimehelp" exe="/usr/libexec/kde4/kcmdatetimehelper" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)

type=AVC msg=audit(1332883422.739:90): avc:* denied* { dac_override } for* pid=1959 comm="kcmdatetimehelp" capability=1* scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability

----
time->Tue Mar 27 23:23:46 2012
type=PATH msg=audit(1332883426.207:93): item=0 name="/" inode=2 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_ubject_r:root_t:s0
type=CWD msg=audit(1332883426.207:93):* cwd="/"

type=SYSCALL msg=audit(1332883426.207:93): arch=40000003 syscall=33 success=no exit=-13 a0=8c490d8 a1=2 a2=419f24bc a3=8c608b4 items=1 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kcmdatetimehelp" exe="/usr/libexec/kde4/kcmdatetimehelper" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null)

type=AVC msg=audit(1332883426.207:93): avc:* denied* { dac_override } for* pid=1959 comm="kcmdatetimehelp" capability=1* scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability


I think I deleted /.config once because I thought it was a mistake.
If I create /.config, the error will be on: /.config/Trolltech.conf.MTxxxx (xxxx is a number which change every time).


--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 
Old 03-28-2012, 01:18 PM
Daniel J Walsh
 
Default Timezones and SELinux...

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 03/27/2012 05:45 PM, enclair wrote:
> Le 27 mars 2012 22:52, Daniel J Walsh <dwalsh@redhat.com <mailto:dwalsh@redhat.com>> a écrit :
>
> Doubt it but did you try what I wrote to the first reporter?
>
>>
>> dac_overrride means that you have a process running as root trying to modify a file that is not owned by root. Usually this means you have a file with the incorrect ownership.
>>
>> Now the audit log did not give you the full path, but you can get it by following the instructions detailed here.
>>
>> http://danwalsh.livejournal.com/34903.html
>
>
> I've turned on full auditing and I have:
>
> # ausearch -m avc -ts recent ---- time->Tue Mar 27 23:23:42 2012 type=PATH msg=audit(1332883422.739:90): item=0 name="/.config" inode=2 dev=fd:00 mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_ubject_r:root_t:s0 type=CWD msg=audit(1332883422.739:90): cwd="/" type=SYSCALL msg=audit(1332883422.739:90): arch=40000003 syscall=39 success=no exit=-13 a0=8c1a4a8 a1=1ff a2=419f24bc a3=8 items=1 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kcmdatetimehelp" exe="/usr/libexec/kde4/kcmdatetimehelper" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1332883422.739:90): avc: denied { dac_override } for pid=1959 comm="kcmdatetimehelp" capability=1 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability ---- time->Tue Mar 27 23:23:46 2012 type=PATH msg=audit(1332883426.207:93): item=0 name="/" inode=2 dev!
=fd:00
> mode=040555 ouid=0 ogid=0 rdev=00:00 obj=system_ubject_r:root_t:s0 type=CWD msg=audit(1332883426.207:93): cwd="/" type=SYSCALL msg=audit(1332883426.207:93): arch=40000003 syscall=33 success=no exit=-13 a0=8c490d8 a1=2 a2=419f24bc a3=8c608b4 items=1 ppid=1 pid=1959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kcmdatetimehelp" exe="/usr/libexec/kde4/kcmdatetimehelper" subj=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 key=(null) type=AVC msg=audit(1332883426.207:93): avc: denied { dac_override } for pid=1959 comm="kcmdatetimehelp" capability=1 scontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:gnomeclock_t:s0-s0:c0.c1023 tclass=capability
>
> I think I deleted /.config once because I thought it was a mistake. If I create /.config, the error will be on: /.config/Trolltech.conf.MTxxxx (xxxx is a number which change every time).
>
>
>

Well /.config is a mistake/bug in kde. They do not set the default homedir, and are writing a random file/directory into the / directory.

Since the command wants to write to the /.config directory, it should have permissions 755 which is causing the DAC_OVERRIDE problem.

chmod -R u+w /.config

Should eliminate the DAC_OVERRIDE request.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk9zD7kACgkQrlYvE4MpobOQ1ACcCPRypcj2Cb w4lNLCw+6IEXtY
00QAn2G5VyXgrLoZO5Ki6MDca3Uko6QT
=lk3X
-----END PGP SIGNATURE-----
--
users mailing list
users@lists.fedoraproject.org
To unsubscribe or change subscription options:
https://admin.fedoraproject.org/mailman/listinfo/users
Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
Have a question? Ask away: http://ask.fedoraproject.org
 

Thread Tools




All times are GMT. The time now is 05:19 AM.

VBulletin, Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO ©2007, Crawlability, Inc.
Copyright ©2007 - 2008, www.linux-archive.org