* I’m repeating myself here: do *not* use enforcing mode. Do use
permissive mode only.
Oh, sorry for this, it was the "easy" way of checking that it didn't work. I have byobu running now with a tail -f of the audit log.
My question was more like "I am hardcoding the path to guix -at least before doing a guix pull -, I cannot understand why that doesn't work, even if I did it just for trying if it solved partially why guix was not found. On the other hand, I get:
type=AVC msg=audit(1560741907.590:426): avc: denied { search } for pid=31810 comm="which" name="gnu" dev="dm-0" ino=931548 scontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:guix_daemon.guix_store_content_t:s0 tclass=dir permissive=1
Should I add something allowing commands under /usr/bin to operate over guix? Or am I mixing things too much?
Regards :)
Laura
--
Ricardo