SELinux is preventing sddm-helper from add_name access on the directory wayland-errors.

[septatrix]

After logging in I always get the below selinux alert:

*****  Plugin catchall_boolean (89.3 confidence) suggests   ******************

If you want to allow polyinstantiation to enabled
Then you must tell SELinux about this by enabling the 'polyinstantiation_enabled' boolean.

Do
setsebool -P polyinstantiation_enabled 1

*****  Plugin catchall (11.6 confidence) suggests   **************************

If you believe that sddm-helper should be allowed add_name access on the wayland-errors directory by default.
Then you should report this as a bug.
You can generate a local policy module to allow this access.
Do
allow this access for now by executing:
# ausearch -c 'sddm-helper' --raw | audit2allow -M my-sddmhelper
# semodule -X 300 -i my-sddmhelper.pp


Additional Information:
Source Context                system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context                system_u:object_r:home_root_t:s0
Target Objects                wayland-errors [ dir ]
Source                        sddm-helper
Source Path                   sddm-helper
Port                          <Unknown>
Host                          Framework-13-AMD
Source RPM Packages           
Target RPM Packages           
SELinux Policy RPM            selinux-policy-targeted-40.28-1.fc40.noarch
Local Policy RPM              selinux-policy-targeted-40.28-1.fc40.noarch
Selinux Enabled               True
Policy Type                   targeted
Enforcing Mode                Enforcing
Host Name                     Framework-13-AMD
Platform                      Linux Framework-13-AMD 6.10.12-200.fc40.x86_64 #1
                              SMP PREEMPT_DYNAMIC Mon Sep 30 21:38:25 UTC 2024
                              x86_64
Alert Count                   4
First Seen                    2024-10-11 18:00:50 CEST
Last Seen                     2024-10-15 12:14:43 CEST
Local ID                      a0380750-d3cd-4f80-a5f9-2afbdcdb2e4e

Raw Audit Messages
type=AVC msg=audit(1728987283.167:982): avc:  denied  { add_name } for  pid=95342 comm="sddm-helper" name="wayland-errors" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=0


Hash: sddm-helper,xdm_t,home_root_t,dir,add_name

[zpytela]

@septatrix Can you list (ls -lZ) the file path and its parent directory SELinux type?

[septatrix]

I am sadly not even sure where that directory is... Neither /var nor in my users home directly