diff --git a/readme.md b/readme.md index 620929e..7647e66 100644 --- a/readme.md +++ b/readme.md @@ -39,13 +39,40 @@ Join us on Matrix over at [#ly-dm:matrix.org](https://matrix.to/#/#ly-dm:matrix. ### Fedora -> [!WARNING] -> You may encounter issues with SELinux on Fedora. It is recommended to add a rule for Ly as it currently does not ship one. - ``` # dnf install kernel-devel pam-devel libxcb-devel zig xorg-x11-xauth xorg-x11-server brightnessctl ``` +> [!WARNING] +> Distributions using SELinux such as Fedora and openSUSE Tumbleweed may encounter issues. It is recommended to add a rule for Ly as it currently does not ship one. + +If encountering session launch failures: + +``` + sudo ausearch -m avc -ts recent +``` + +If SELinux is denying process context transition, you will see this output. + +``` + denied { transition } for pid=XXXX comm="ly" path="/usr/bin/bash" + scontext=system_u:system_r:unconfined_service_t:s0 + tcontext=unconfined_u:unconfined_r:unconfined_t:s0 + tclass=process permissive=0 +``` + +Pipe this output into `audit2allow` to generate a security module package. This will persist regardless of changes to filesystem permissions. + +``` + sudo ausearch -m avc -ts recent | audit2allow -M ly-local +``` + +``` + sudo semodule -i ly-local.pp +``` + +*This fix has been confirmed on Fedora 39 and 44 and openSUSE Tumbleweed. (#494)* + ### FreeBSD ```