No SEAlerts in Gnome Shell

Ask Fedora
,
1

Looking through journalctl I noticed some SELinux denials, but did not receive any notification of these in Gnome Shell. Is this normal?

Opening the SE Troubleshooting browser with sealert -b shows no alerts.

What needs to be installed or configured to get notified with the option of opening the SEAlert browser to resolve issues, similar to the defaults on MATE?

As for the issue, any clues on this? There were 13 such messages upon waking from sleep.

selinux: avc: denied { status } for auid=1000 uid=1000 gid=1000 path=“/proc/self/mountinfo” cmdline=“/usr/bin/gnome-shell” scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=service permissive=0

2

On my system these selinux error messages related to /proc/self/mountinfo occur when the GNOME extension AppIndicator and Kstatusnotifieritem Support (or the package gnome-shell-extension-appindicator) is installed. When disabling the extension, the messages do not appear anymore.

1 Like