SELinux Errors on todays update

Ask Fedora
1

On this morning’s update I received this error:

>>> Running post-transaction scriptlet: passt-selinux-0:0^20250606.g754c6d7-1.fc
>>> Finished post-transaction scriptlet: passt-selinux-0:0^20250606.g754c6d7-1.f
>>> Scriptlet output:                                                           
>>> restorecon: Could not stat /run/user/1000/doc: Permission denied.           
>>> restorecon: Could not stat /run/user/1000/gvfs: Permission denied.          
>>>    
Checking the mentioned files I see:

SU: # ll /run/user/1000
ls: cannot access ‘/run/user/1000/doc’: Permission denied
ls: cannot access ‘/run/user/1000/gvfs’: Permission denied
total 12
drwxr-xr-x. 3 edward edward 60 Jun 10 10:30 app
drwx------. 2 edward edward 60 Jun 10 10:29 at-spi
drwx------. 2 edward edward 60 Jun 10 10:29 dconf
d??? ? ? ? ? ? doc
drwx------. 2 edward edward 140 Jun 10 10:30 gnupg
d??? ? ? ? ? ? gvfs
drwx------. 2 edward edward 40 Jun 10 10:29 gvfsd
drwx------. 2 edward edward 80 Jun 10 10:29 pulse
drwxr-xr-x. 7 edward edward 180 Jun 10 10:34 systemd
-rw-r–r–. 1 edward edward 67 Jun 10 10:29 KSMserver__0
srw-rw-rw-. 1 edward edward 0 Jun 10 10:29 bus
srw-------. 1 edward edward 0 Jun 10 10:29 drkonqi-coredump-launcher
-rw-------. 1 edward edward 310 Jun 10 10:29 iceauth_RjaxYe
srwxrwx–x. 1 edward edward 0 Jun 10 10:30 kio_http_cache_cleaner
lrwxrwxrwx. 1 edward edward 80 Jun 10 10:30 org.keepassxc.KeePassXC.BrowserServer → /run/user/1000/app/org.keepassxc.KeePassXC/org.keepassxc.KeePassXC.BrowserServer
srw-rw-rw-. 1 edward edward 0 Jun 10 10:29 pipewire-0
-rw-r-----. 1 edward edward 0 Jun 10 10:29 pipewire-0.lock
srw-rw-rw-. 1 edward edward 0 Jun 10 10:29 pipewire-0-manager
-rw-r-----. 1 edward edward 0 Jun 10 10:29 pipewire-0-manager.lock
srw-------. 1 edward edward 0 Jun 10 10:29 ssh-agent.socket
srwxr-xr-x. 1 edward edward 0 Jun 10 10:29 wayland-0
-rw-r-----. 1 edward edward 0 Jun 10 10:29 wayland-0.lock
-rw-------. 1 edward edward 97 Jun 10 10:29 xauth_zxwMuf
Tue Jun 10 10:36:03[root@odyssey: ~]
SU: #

Help needed to explain the error and how to correct.

Thanks

2

These two directories are special because root cannot access them. This is different from the general rule that root can access everything.

It was actually trying to run restorecon -R /run/user when the error occurred.

But there was a different SELinux related error when upgrading passt-selinux. It was trying to install a new ruleset, but it failed.

See https://bugzilla.redhat.com/show_bug.cgi?id=2371159

3

I got the same error when I updated yesterday:

Running post-transaction scriptlet: passt-selinux-0:0^20250606.g754c6d7-1.fc42.noarch                                                                                            
 Finished post-transaction scriptlet: passt-selinux-0:0^20250606.g754c6d7-1.fc42.noarch                                                                                            
 Scriptlet output:                                                                                                                                                                
 restorecon: Could not stat /run/user/1000/doc: Permission denied.                                                                                                                
 restorecon: Could not stat /run/user/1000/gvfs: Permission denied.
4

It’s fixed with, passt - Plug A Simple Socket Transport

Which is in updates testing now..
You should be able to install with sudo dnf upgrade --refresh passt --enable-repo=updates-testing

1 Like