Re: dac_override with Cobbler

[lejeczek]

On 02/11/2023 20:06, Zdenek Pytela wrote:
>  On Thu, Nov 2, 2023 at 6:18 PM lejeczek 
>  <peljasz(a)yahoo.co.uk&gt; wrote:
>
>      Hi guys.
>
>      I wonder if someone might have seen _cobbler_ trying
>      to claim this.
>      I've tried a few sebools but regardless SELinux denies
>      cobbler:
>
>      #============= cobblerd_t ==============
>      allow cobblerd_t self:capability dac_override;
>
>      and from what I gather _dac_override_ is pretty big
>      thing and I wonder if _cobbler_ should have it.
>
>  Hi,
>
>  If you can reproduce it, use one of the debugging option 
>  to find out access to which file triggers it:
>  https://fedoraproject.org/wiki/SELinux/Debugging#Enable_full_auditing
>  
Meanwhile I failed a BZ - it's systemd unable to start 
_cobblerd_  vanilla default config