Bug 440431
| Summary: | SELinux is preventing gnome-power-man (xdm_t) "execstack" to <Neznámé> (xdm_t). | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Matěj Cepl <mcepl> |
| Component: | gnome-power-manager | Assignee: | Richard Hughes <rhughes> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | low | Docs Contact: | |
| Priority: | low | ||
| Version: | 9 | CC: | dwalsh, mcepl, poelstra, rstrode |
| Target Milestone: | --- | Keywords: | Reopened, SELinux |
| Target Release: | --- | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2008-09-10 12:44:46 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
|
Description
Matěj Cepl
2008-04-03 14:49:13 UTC
Your system is heavily mislabeled, causing xdm_t to try to run java apps. I believe we finally got your machine labeling corrected and it fixed these problems. Sorry, Dan, what Java app are you talking about? gnome-power-manager is certainly not the one and it has all the business to run even inside of gdm. ... and note also that this has happened well after heavy relabelling and couple of days computer working in the Enforcing mode. Well when you login, if you bring up a terminal what does id -Z say? If it says xdm_t you still have a problem. If it says unconfined_t then that is correct, and if xdm_t is still asking for execstack on gnome-power-manager we need to bring in the gdm guys. [matej@viklef ~]$ id -Z unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh [matej@viklef ~]$ id uid=500(matej) gid=500(matej) skupiny=4(adm),10(wheel),12(mail),14(uucp),51(smmsp),100(users),104(mock),106(pulse-rt),500(matej),501(src) context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh [matej@viklef ~]$ sudo -i [sudo] password for root: [root@viklef ~]# id -Z unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh [root@viklef ~]# id uid=0(root) gid=0(root) skupiny=0(root),1(bin),2(daemon),3(sys),4(adm),6(disk),10(wheel) context=unconfined_u:unconfined_r:unconfined_t:SystemLow-SystemHigh [root@viklef ~]# logout [matej@viklef ~]$ But is this still happening after we fixed up the machine? Ray is xdm now running gnome-power-manager? xdm isn't but gdm is That is what I meant, gnome-power-manager should not be requiring execstack. Is this considered a bug that needs to be fixed for F9? Does the powermanagement code work in enforcing mode, from gdm? Doesn't look like g-p-m requires execstack [mclasen@localhost Desktop]$ execstack -q /usr/bin/gnome-power-manager - /usr/bin/gnome-power-manager (In reply to comment #10) > Does the powermanagement code work in enforcing mode, from gdm? It seems like working -- icon is in the notification area and makes some reasonably wild guesses. Matthias, how to test it's working? Matej, use the Suspend/Hibernate menu items that you get on the icon. Do these work ? (In reply to comment #13) > Matej, use the Suspend/Hibernate menu items that you get on the icon. Do these > work ? Yes, that's what I use -- too lazy for pm-suspend ;-). Changing version to '9' as part of upcoming Fedora 9 GA. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping gnome-power-manager doesn't need execstack -- I think there's a corrupt file somewhere. |