security February 2022

security@lists.fedoraproject.org

2 participants
2 discussions

Autoreply: "security Digest, Vol 112, Issue 1"
by ennio＠rimote.nl 08 Feb '22

08 Feb '22

Beste lezer / Dear reader, Dit e-mailadres gebruik ik tegenwoordig niet meer. Graag voortaan alle e-mail correspondentie richten naar ask(a)enn.io. This e-mailadres is currently no longer in use by me. Please direct all e-mail correspondence to ask(a)enn.io. Met vriendelijke groet / with kind regards, Ennio Wolsink E: ask(a)enn.io W: enn.io T: +31 6 300 24 509

1 0

lsetxattr failed, SELINUX_ERR op=setxattr invalid_context
by Chris Murphy 08 Feb '22

08 Feb '22

Hi, I'm running Fedora 35, and I'm trying to replicate a Fedora 36 root snapshot from one Btrfs file system to another, but it fails. This is what I see on CLI (with verbose logging) set_xattr etc/NetworkManager/dispatcher.d - name=security.selinux data_len=56 data=system_u:object_r:NetworkManager_dispatcher_script_t:s0 ERROR: lsetxattr etc/NetworkManager/dispatcher.d security.selinux=system_u:object_r:NetworkManager_dispatcher_script_t:s0 failed: Invalid argument This is the AVC error: [25325.074972] audit[23509]: AVC avc: denied { mac_admin } for pid=23509 comm="btrfs" capability=33 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=capability2 permissive=0 [25325.075188] audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:NetworkManager_dispatcher_script_t:s0" I think what's going on is, Fedora 35's SELinux is preventing `btrfs receive` from setting a label it doesn't know. If so, is this definitely the correct behavior? Or is there something `btrfs receive` could do to allow setting this unfamiliar label anyway? I filed a btrfs-progs bug, feel free to answer there (or here) https://github.com/kdave/btrfs-progs/issues/447 Thanks, -- Chris Murphy

1 1

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

security February 2022