From cb713024413aaef42364b8860bb2fd5a4b27fb12 Mon Sep 17 00:00:00 2001 From: AnErrupTion Date: Sun, 5 Jul 2026 20:58:42 +0200 Subject: [PATCH] Update readme.md Signed-off-by: AnErrupTion --- readme.md | 54 ++++++++++++++++++++++++++---------------------------- 1 file changed, 26 insertions(+), 28 deletions(-) diff --git a/readme.md b/readme.md index 7647e66..8f3a0eb 100644 --- a/readme.md +++ b/readme.md @@ -44,34 +44,32 @@ Join us on Matrix over at [#ly-dm:matrix.org](https://matrix.to/#/#ly-dm:matrix. ``` > [!WARNING] -> Distributions using SELinux such as Fedora and openSUSE Tumbleweed may encounter issues. It is recommended to add a rule for Ly as it currently does not ship one. - -If encountering session launch failures: - -``` - sudo ausearch -m avc -ts recent -``` - -If SELinux is denying process context transition, you will see this output. - -``` - denied { transition } for pid=XXXX comm="ly" path="/usr/bin/bash" - scontext=system_u:system_r:unconfined_service_t:s0 - tcontext=unconfined_u:unconfined_r:unconfined_t:s0 - tclass=process permissive=0 -``` - -Pipe this output into `audit2allow` to generate a security module package. This will persist regardless of changes to filesystem permissions. - -``` - sudo ausearch -m avc -ts recent | audit2allow -M ly-local -``` - -``` - sudo semodule -i ly-local.pp -``` - -*This fix has been confirmed on Fedora 39 and 44 and openSUSE Tumbleweed. (#494)* +> Distributions using SELinux such as Fedora and openSUSE Tumbleweed may encounter issues. If you encounter such issues, such as session launch failures, proceed with the following steps: +> +> ``` +> # ausearch -m avc -ts recent +> ``` +> +> If SELinux is denying process context transition, you will see this output: +> +> ``` +> denied { transition } for pid=XXXX comm="ly" path="/usr/bin/bash" +> scontext=system_u:system_r:unconfined_service_t:s0 +> tcontext=unconfined_u:unconfined_r:unconfined_t:s0 +> tclass=process permissive=0 +> ``` +> +> Pipe this output into `audit2allow` to generate a security module package. This will persist regardless of changes to filesystem permissions: +> +> ``` +> # ausearch -m avc -ts recent | audit2allow -M ly-local +> ``` +> +> ``` +> # semodule -i ly-local.pp +> ``` +> +> *This fix has been confirmed on Fedora 39 and 44 and openSUSE Tumbleweed. (#494)* ### FreeBSD