[SOLVED] New Fedora 21 Userid Cannot Start LibreOffice 4.3

djl47 · 02-13-2015, 01:44 AM

I created a new user on my Fedora 21 system so I could demo Fedora and apps to coworkers without leaving my personal account exposed. After logging into the account I launched Firefox and verified connectivity without any problems. Then I launched Libre office and got the following nastygram

Code:

The application cannot be started. 
LibreOffice user installation could not be processed due to missing access rights. Please make sure that you have sufficient access rights for the following location and restart LibreOffice:

/home/fedorademo/.config/libreoffice/4

This looks like a variation of the folders being owned by root but that isn't the case with this account as everything is owned by the new account.

Code:

[fedorademo@tesseract ~]$ pwd
/home/fedorademo
[fedorademo@tesseract ~]$ cd .config
[fedorademo@tesseract .config]$ ll
total 80
<snip>
drwxrwxr-x. 3 fedorademo fedorademo 4096 Feb  9 20:12 libreoffice
<snip>
[fedorademo@tesseract .config]$ cd libreoffice
[fedorademo@tesseract libreoffice]$ ll
total 4
drwx------. 3 fedorademo fedorademo 4096 Feb  9 20:12 4
[fedorademo@tesseract libreoffice]$ cd 4
[fedorademo@tesseract 4]$ ll
total 4
drwxrwxr-x. 9 fedorademo fedorademo 4096 Feb  9 20:42 user
[fedorademo@tesseract 4]$ cd user
[fedorademo@tesseract user]$ ll
total 32
drwxrwxr-x. 2 fedorademo fedorademo 4096 Feb  9 20:42 autotext
drwxrwxr-x. 3 fedorademo fedorademo 4096 Feb  9 20:42 basic
drwxrwxr-x. 2 fedorademo fedorademo 4096 Feb  9 20:42 config
drwxrwxr-x. 3 fedorademo fedorademo 4096 Feb  9 20:42 database
drwxrwxr-x. 2 fedorademo fedorademo 4096 Feb  9 20:12 extensions
drwxrwxr-x. 2 fedorademo fedorademo 4096 Feb  9 20:42 gallery
-rw-------. 1 fedorademo fedorademo  329 Feb  9 20:42 registrymodifications.xcu
drwxrwxr-x. 2 fedorademo fedorademo 4096 Feb  9 20:12 uno_packages
[fedorademo@tesseract user]$ cd  config
[fedorademo@tesseract config]$ ll
total 404
-rw-r--r--. 1 fedorademo fedorademo   4308 Jan 16 18:28 arrowhd.soe
-rw-r--r--. 1 fedorademo fedorademo  48408 Jan 16 18:27 autotbl.fmt
-rw-r--r--. 1 fedorademo fedorademo  30852 Jan 16 18:28 classic.sog
-rw-r--r--. 1 fedorademo fedorademo  13132 Jan 16 18:28 cmyk.soc
-rw-r--r--. 1 fedorademo fedorademo   4408 Jan 16 18:28 gallery.soc
-rw-r--r--. 1 fedorademo fedorademo   5238 Jan 16 18:28 hatching.soh
-rw-r--r--. 1 fedorademo fedorademo  10766 Jan 16 18:28 html.soc
-rw-rw-r--. 1 fedorademo fedorademo   2329 Feb  9 20:12 javasettings_Linux_X86_64.xml
-rw-r--r--. 1 fedorademo fedorademo   2334 Jan 16 18:28 libreoffice.soc
-rw-r--r--. 1 fedorademo fedorademo   6840 Jan 16 18:28 modern.sog
-rw-r--r--. 1 fedorademo fedorademo   5271 Jan 16 18:28 palette.soc
-rw-r--r--. 1 fedorademo fedorademo  31320 Jan 16 18:28 scribus.soc
-rw-r--r--. 1 fedorademo fedorademo 155895 Jan 16 18:28 standard.sob
-rw-r--r--. 1 fedorademo fedorademo  11461 Jan 16 18:28 standard.soc
-rw-r--r--. 1 fedorademo fedorademo   2426 Jan 16 18:28 standard.sod
-rw-r--r--. 1 fedorademo fedorademo   4984 Jan 16 18:28 standard.soe
-rw-r--r--. 1 fedorademo fedorademo   5080 Jan 16 18:28 standard.sog
-rw-r--r--. 1 fedorademo fedorademo   2171 Jan 16 18:28 standard.soh
-rw-r--r--. 1 fedorademo fedorademo   1708 Jan 16 18:28 styles.sod
-rw-r--r--. 1 fedorademo fedorademo   2331 Jan 16 18:28 tango.soc
-rw-r--r--. 1 fedorademo fedorademo  14420 Jan 16 18:28 web.soc
[fedorademo@tesseract config]$

And so on
I've tried it with an admin account and a standard account in Fedora 21 and both fail.
I tried it with a standard account in Fedora 20 and it worked.
Fedora 20 is running a slightly older version of Libreoffice 4.2.8.2-2.fc20
Fedora 21 is running 4.3.5.2-11.fc21. Any thoughts on how to troubleshoot this would be appreciated. Right now I can't tell if it is a LibreOffice problem or a Fedora problem. Thanks for reading

elija · 02-13-2015, 01:10 PM

When I see something like that I always suspect selinux. Run ls -L to view the security contexts. I'm no expert on selinux but this is some documentation.

You can also temporarily turn off selinux to eliminate or confirm it as the problem.

John VV · 02-13-2015, 01:27 PM

HOW did you create the new user ?

terminal with adduser
or
use the administration gui tools
the GUI is recommend on Gnome

you ALSO have to set up the NEW users groups
-- did you ?

djl47 · 02-13-2015, 07:24 PM

Quote:

Originally Posted by John VV

HOW did you create the new user ?

terminal with adduser
or
use the administration gui tools
the GUI is recommend on Gnome

you ALSO have to set up the NEW users groups
-- did you ?

I used the GUI interface in Gnome. I did not set up any new groups. (Didn't have to in Fedora 20, everything worked there.) I'll look at that when I get home tonight. Thanks.

josephj · 02-13-2015, 09:38 PM

First of all, why do you expect any 3D software to work right in a tesseract?

Aside from that, did you install Libreoffice locally as this user or did you do it through your package manager (yum?) running as root (sudo) - the normal way?

Either way, did you get any messages during the install?

I assume you initially tried to run LO from your home directory. It probably won't be a problem, but it is kind of weird starting an application when your current directory is the application's configuration directory (first code snippet).

I'm sure you checked this, but who owns ~/.config? (If your user didn't, I'm sure you would be seeing a lot more problems than just this.)

The only other thing I can think of would be to rename .config/libreoffice to something else so LO can't find it and will probably recreate it for you when you open the application. That might fix things and you'll still have the original saved if you need to restore it or look into the problem further, etc..

If you don't get an answer here, you might try posting your question in
the AOO Installation forum.

AFAIK, they field LO questions as well.

Joe

djl47 · 02-13-2015, 10:37 PM

Thanks for the answer. Comments below.

Quote:

Originally Posted by josephj

First of all, why do you expect any 3D software to work right in a tesseract?

It's a way to get past the Windows event horizon.

Aside from that, did you install Libreoffice locally as this user or did you do it through your package manager (yum?) running as root (sudo) - the normal way?
LO comes pre packaged with Fedora 20 and 21. The only thing I've done to the Fedora 21 system is routine "sudo yum update" when check-updates finds something to update including LO.

Either way, did you get any messages during the install?
No messages that I recall.

I assume you initially tried to run LO from your home directory. It probably won't be a problem, but it is kind of weird starting an application when your current directory is the application's configuration directory (first code snippet).
The first code snippet is copied from an error message that Libreoffice displays when I launch it. Libreoffice runs fine on the original userid created (along side root) during the install. I've never tried to start Libreoffice outside of Gnome.

I'm sure you checked this, but who owns ~/.config? (If your user didn't, I'm sure you would be seeing a lot more problems than just this.)

Code:

drwx------. 17 linuxdemo linuxdemo 4096 Feb 11 21:07 .config

The only other thing I can think of would be to rename .config/libreoffice to something else so LO can't find it and will probably recreate it for you when you open the application. That might fix things and you'll still have the original saved if you need to restore it or look into the problem further, etc..
Not sure this would make a difference but I'll try it anyway. It was a brand new userid. I doubt the libreoffice directory was there when I created the userid. I'll create a new userid and look before running Libreoffice.

If you don't get an answer here, you might try posting your question in
the AOO Installation forum.
They have been helpful in the past with both LO and OO questions. I posted over there a couple of days ago.
AFAIK, they field LO questions as well.

Joe

Edit: I created a new userid and as I expected, there was no libreoffice directory in .config when I first signed onto the userid. The directory is created the first time the user runs a libreoffice application.

djl47 · 02-15-2015, 01:34 AM

Quote:

Originally Posted by elija

When I see something like that I always suspect selinux. Run ls -L to view the security contexts. I'm no expert on selinux but this is some documentation.

I have no doubt that the author of this documentation understands SELinux but it falls short.

Quote:

The SELinux user identity is an identity known to the policy that is authorized for a specific set of roles, and for a specific MLS range. Each Linux user is mapped to an SELinux user via SELinux policy. This allows Linux users to inherit the restrictions placed on SELinux users. The mapped SELinux user identity is used in the SELinux context for processes in that session, in order to define what roles and levels they can enter. Run the semanage login -l command as the Linux root user to view a list of mappings between SELinux and Linux user accounts:
<example output snipped, real world example reproduced below>
Output may differ slightly from system to system. The Login Name column lists Linux users, and the SELinux User column lists which SELinux user the Linux user is mapped to. For processes, the SELinux user limits which roles and levels are accessible. The last column ...

So I run command this on my Fedora 21 system:

Code:

[root@tesseract djl]# semanage login -l

Login Name           SELinux User         MLS/MCS Range        Service

__default__          unconfined_u         s0-s0:c0.c1023       *
root                 unconfined_u         s0-s0:c0.c1023       *
system_u             system_u             s0-s0:c0.c1023       *
[root@tesseract djl]# cd ..

Note that the userid djl that ran the command is not listed, nor is the newly created user fedorauser. Phrases like "Linux user" and "Login Name" have specific meaning which does not seem to apply here. Going elsewhere I find other doco and try this

Code:

[root@tesseract djl]# semanage user -l

                Labeling   MLS/       MLS/                          
SELinux User    Prefix     MCS Level  MCS Range                      SELinux Roles

guest_u         user       s0         s0                             guest_r
root            user       s0         s0-s0:c0.c1023                 staff_r sysadm_r system_r unconfined_r
staff_u         user       s0         s0-s0:c0.c1023                 staff_r sysadm_r system_r unconfined_r
sysadm_u        user       s0         s0-s0:c0.c1023                 sysadm_r
system_u        user       s0         s0-s0:c0.c1023                 system_r unconfined_r
unconfined_u    user       s0         s0-s0:c0.c1023                 system_r unconfined_r
user_u          user       s0         s0                             user_r
xguest_u        user       s0         s0                             xguest_r
[root@tesseract djl]#

So where is an SELinux object bound to a userid? Sorry for the rant but I feel like I've wasted a couple hours wading through ambiguous and incomplete doco.

tlan · 02-15-2015, 03:19 AM

1. i would disable selinux to verify that its the culprit or set to permissive in /etc/selinux/config and reboot, if it's causing the issue then work for a solution or disable or set to permissive permanetly.
2. if you created a new user and LO was not listed. it sounds like a bad install, purge and reinstall it.

djl47 · 02-16-2015, 12:52 AM

A long time ago I found a standard.soc file that contained a much more usable color profile than the default profile that comes with Libreoffice. I copied it to /usr/lib64/libreoffice/presets/config and to my own libreoffice config directories and forgot about it. Months later I added a new user and the default permissions in the source folder caused Libreoffice to fail when it tried to copy the file to the local user folder. I changed the permissions to 644 and everything worked fine.

Code:

[root@tesseract fedorauser]# cd /usr/lib64/libreoffice/presets/config
[root@tesseract config]# ll
total 416
-rw-r--r--. 1 root root   4308 Jan 16 18:28 arrowhd.soe
-rw-r--r--. 1 root root  48408 Jan 16 18:27 autotbl.fmt
-rw-r--r--. 1 root root  30852 Jan 16 18:28 classic.sog
-rw-r--r--. 1 root root  13132 Jan 16 18:28 cmyk.soc
-rw-r--r--. 1 root root   4408 Jan 16 18:28 gallery.soc
-rw-r--r--. 1 root root   5238 Jan 16 18:28 hatching.soh
-rw-r--r--. 1 root root  10766 Jan 16 18:28 html.soc
-rw-r--r--. 1 root root   2334 Jan 16 18:28 libreoffice.soc
-rw-r--r--. 1 root root   6840 Jan 16 18:28 modern.sog
-rw-r--r--. 1 root root   5271 Jan 16 18:28 palette.soc
-rw-r--r--. 1 root root  31320 Jan 16 18:28 scribus.soc
-rw-r--r--. 1 root root 155895 Jan 16 18:28 standard.sob
-rw-------. 1 root root  15719 Mar  6  2014 standard.soc
-rw-r--r--. 1 root root   2426 Jan 16 18:28 standard.sod
-rw-r--r--. 1 root root   4984 Jan 16 18:28 standard.soe
-rw-r--r--. 1 root root   5080 Jan 16 18:28 standard.sog
-rw-r--r--. 1 root root   2171 Jan 16 18:28 standard.soh
-rw-r--r--. 1 root root   1708 Jan 16 18:28 styles.sod
-rw-r--r--. 1 root root   2331 Jan 16 18:28 tango.soc
-rw-r--r--. 1 root root  11461 Jan 16 18:28 uglystandard.uglysoc
-rw-r--r--. 1 root root  14420 Jan 16 18:28 web.soc

In other news I tried setting selinux to permissive. The instructions in the link above are obsolete. Here's what worked on my system.

Code:

[root@tesseract config]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      29
[root@tesseract config]# setenforce 0
[root@tesseract config]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   permissive
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      29
[root@tesseract config]# setenforce 1
[root@tesseract config]# sestatus
SELinux status:                 enabled
SELinuxfs mount:                /sys/fs/selinux
SELinux root directory:         /etc/selinux
Loaded policy name:             targeted
Current mode:                   enforcing
Mode from config file:          enforcing
Policy MLS status:              enabled
Policy deny_unknown status:     allowed
Max kernel policy version:      29
[root@tesseract config]#

Thanks for all the input. In the end it was noticing that standard.soc hadn't been copied to the local config directory while uglystandard.uglysoc (the original) had been copied. I eventually recognized this as a clue.