Helps troubleshoot SELinux problems
Previously the alarm was reset only in main DBUS thread and only when a new AVC
appeared. In cases when there were several AVC messages in short time, analyses
could take more than a default timeout and later analyses were not saved to
the database. Now we cancel pending timeouts before analyze_avc() and reset the
timeout back to default when it's done.
Fixes:
$ journalctl | grep 'sealert -l'
setroubleshoot[314039]: SELinux is preventing bash from search access on the directory .local. For complete SELinux messages run: sealert -l ccf3307a-f4ab-4584-87c6-63884daf841a
$ sealert -l ccf3307a-f4ab-4584-87c6-63884daf841a
Error
query_alerts error (1003): id (ccf3307a-f4ab-4584-87c6-63884daf841a) not found
|
||
|---|---|---|
| tests | ||
| .gitignore | ||
| 0001-framework-Cancel-pending-alarm-during-AVC-analyses.patch | ||
| README.translations | ||
| setroubleshoot-po.patch | ||
| setroubleshoot.init | ||
| setroubleshoot.logrotate | ||
| setroubleshoot.spec | ||
| setroubleshoot.tmpfiles | ||
| sources | ||
Setroubleshoot translations currently live in the following locations:
- https://fedora.zanata.org/project/view/setroubleshoot
- contains translations for both stable (RHEL) and master (Fedora) branches
- maintains large number of languages (several of which do not actually contain any translated strings)
- updated by community and partially by RH localization effort
- setroubleshoot source repositories (https://pagure.io/setroubleshoot and https://github.com/fedora-selinux/setroubleshoot)
- is kept up-to-date with fedora.zanata
How to update source files on fedora.zanata:
$ git clone git@github.com:fedora-selinux/setroubleshoot.git
$ cd setroubleshoot/framework
# Update Makefile
$ ./autogen.sh
# generate new potfile
$ cd po
$ make setroubleshoot.pot
# Repeat the process for plugins
# Push potfiles to zanata
$ zanata-cli push --push-type source
How to pull new translations from zanata
$ git clone git@github.com:fedora-selinux/setroubleshoot.git
$ cd setroubleshoot
# Make sure "zanata.xml" file pointing to corresponding translations branch is present
# Optionally update source files on zanata
# Pull new translations from zanata
$ zanata-cli -e pull --pull-type trans