SELinux is preventing mpd from getattr access on the directory /root/.config.
What? Why does mpd want to access /root/.config? What’s MPD? It’s a daemon for playing music. It runs as a service, which I connect to with either ncmp or ncmpcpp. Here’s the full SETroubleshoot detail: SELinux is preventing mpd from getattr access on the directory /root/.config. ***** Plugin catchall (100. confidence) suggests ************************** If you believe that mpd should be allowed getattr access on the .config directory by default. Then you should report this as a bug. You can generate a local policy module to allow this access. Do allow this access for now by executing: # ausearch -c 'mpd' --raw | audit2allow -M my-mpd # semodule -X 300 -i my-mpd.pp Additional Information: Source Context system_u:system_r:mpd_t:s0 Target Context unconfined_u:object_r:config_home_t:s0 Target Objects /root/.config [ dir ] Source mpd Source Path mpd Port Host watamem.local Source RPM Packages Target RPM Packages Policy RPM selinux-policy-3.13.1-283.26.fc27.noarch Selinux Enabled True Policy Type targeted Enforcing Mode Enforcing Host Name watamem.local Platform Linux watamem.local 4.15.4-300.fc27.x86_64 #1 SMP Mon Feb 19 23:31:15 UTC 2018 x86_64 x86_64 Alert Count 2 First Seen 2018-03-01 19:37:10 AEDT Last Seen 2018-03-01 19:40:15 AEDT Local ID 95638a12-2d84-4060-9339-8f05c61c619e Raw Audit Messages type=AVC msg=audit(1519893615.831:1060): avc: denied { getattr } for pid=23997 comm="mpd" path="/root/.config" dev="dm-0" ino=1703951 scontext=system_u:system_r:mpd_t:s0 tcontext=unconfined_u:object_r:config_home_t:s0 tclass=dir permissive=0 Hash: mpd,mpd_t,config_home_t,dir,getattr The version of MPD that causes this issue is: 0.20.10 on Fedora 27. I’m pretty sure it was working last week and I didn’t have to do anything. So what’s changed? Well, it seems like this could be a very old problem as reported int bug 1325502. Basically, when mpd is started, it tries to read the MPD configuration file (mpd.conf). According to the man page for mpd.conf, the configuration file should be read in the following order: ...