On 2023-02-02 16:12, Per Jessen wrote:
Carlos E. R. wrote:
On 2023-02-02 12:31, Erwin Lam wrote:
On 01-02-2023 15:17, Carlos E. R. wrote:
On 2023-02-01 15:00, Bengt Gördén wrote:
Carlos E. R. wrote:
...
Hi Carlos,
The issue is caused by systemd hardening. Have a look at the file "/usr/lib/systemd/system/mlocate.service",in particular the line "ProtectKernelModules=true". This systemd setting not only prevents the service from loading any modules, but also denies the service access to directory "/lib/modules".
Wow. I would never have guessed that.
Yeah, me neither. That was quite a find, but it would (eventually) have become apparent to anyone running an strace on updatedb.
To anyone, I doubt it. How is a systemd "thing" seen inside the updatedb call? I'm unsure I would see it. Wait, I don't know how to trace a program that is run this way: systemctl start mlocate.service -- Cheers / Saludos, Carlos E. R. (from Elesar, using openSUSE Leap 15.4)