Bug 120164
Summary: | preferences GUI loses file context | ||||||
---|---|---|---|---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Tim Waugh <twaugh> | ||||
Component: | xscreensaver | Assignee: | Ray Strode [halfline] <rstrode> | ||||
Status: | CLOSED CURRENTRELEASE | QA Contact: | |||||
Severity: | medium | Docs Contact: | |||||
Priority: | medium | ||||||
Version: | rawhide | CC: | dwalsh, gczarcinski | ||||
Target Milestone: | --- | ||||||
Target Release: | --- | ||||||
Hardware: | All | ||||||
OS: | Linux | ||||||
Whiteboard: | |||||||
Fixed In Version: | Doc Type: | Bug Fix | |||||
Doc Text: | Story Points: | --- | |||||
Clone Of: | Environment: | ||||||
Last Closed: | 2004-11-02 20:03:30 UTC | Type: | --- | ||||
Regression: | --- | Mount Type: | --- | ||||
Documentation: | --- | CRM: | |||||
Verified Versions: | Category: | --- | |||||
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
Cloudforms Team: | --- | Target Upstream Version: | |||||
Embargoed: | |||||||
Bug Depends On: | |||||||
Bug Blocks: | 114963, 123268 | ||||||
Attachments: |
|
Description
Tim Waugh
2004-04-06 15:11:43 UTC
I'll respond to the list. I'm not sure why xscreensaver needs a separate context. Because it needs to read the /etc/passwd file when you lock it. Dan Unlocking is done via PAM, so any access to /etc/shadow is cordoned off there. Yes but policy does not allow random executables to run unix_chkpwd which is what pam is running to check and modify the passwd file. Dan Created attachment 106087 [details]
Propagate file security context to rewritten config file
Hi Dan,
Is this bug still relevant?
I don't know much about how SELinux works, but I'm guess a bit based on
<selinux/selinux.h>. Is the above patch what you're looking for?
No this is no longer a bug, screensaver is now run under the regular users context so the file gets labeled correctly. Dan |