Bug 160881
Summary: | Xdm does not set correct SELinux context | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Göran Uddeborg <goeran> |
Component: | xorg-x11 | Assignee: | X/OpenGL Maintenance List <xgl-maint> |
Status: | CLOSED NOTABUG | QA Contact: | David Lawrence <dkl> |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | 4 | CC: | djuran, dwalsh, rcoker |
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | All | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2005-06-23 11:26:01 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Göran Uddeborg
2005-06-17 23:00:53 UTC
The problem here is that xdm has not been ported to use SELinux, and it is not using the pam_selinux.so. Try setting up it's pam file like login. I think the only thing we support is gdm for SELinux anyways. Dan That's what I suspected. Thanks for the info Dan. Including pam_selinux in /etc/pam.d/xdm in a similar way as in /etc/pam.d/login does indeed seem to help. (nottys rather than multiple, but otherwise the same.) Given the emphasis on SELinux in FC and RHEL nowdays, wouldn't it make sense to do this in the distributed version? It seems all display managers (and other login methods) ought to be SELinux-enabled. At least as long as it is as easy as this fix was. |