Bug 473783

Summary:	SELinux prevents kdm from working properly
Product:	[Fedora] Fedora	Reporter:	Marcelo <mmtsales>
Component:	selinux-policy	Assignee:	Daniel Walsh <dwalsh>
Status:	CLOSED DUPLICATE	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	high	Docs Contact:
Priority:	medium
Version:	10	CC:	dwalsh, jkubin, mgrepl
Target Milestone:	---
Target Release:	---
Hardware:	i386
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2008-12-02 15:50:53 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Marcelo 2008-11-30 15:47:31 UTC

Description of problem:
When SELinux is enabled in enforcing mode, regular users can not login to KDE using kdm. kdm displays the following message:
"Cannot enter home directory. Using /."
When I click ok, I get this other one:
"Could not start kstartupconfig4. Check your installation."
And then kdm returns to the login screen. root is allowed to login.
Also, kdm do not display user photos (face icons) in the login screen.

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1. Set SELinux to enforce mode
2. Create /etc/sysconfig/desktop file to replace gdm with kdm
3. Load Fedora 10
4. At kdm login screen, try to login to KDE as a regular user
  
Actual results:
Login is denied and user gets stuck at the login screen

Expected results:
User logs in to KDE

Comment 1 Daniel Walsh 2008-12-01 21:02:46 UTC

This is working fine for me with selinux-policy-3.5.13-26.fc10.noarch

Not sure of anything that would be fixed in there though.

Please attach the avc messages you are seeing.

Comment 2 Marcelo 2008-12-01 22:14:52 UTC

What are avc messages and where would I see them?

Comment 3 Marcelo 2008-12-01 22:44:18 UTC

Please see the file attached to bug https://bugzilla.redhat.com/show_bug.cgi?id=473786

Thanks

Comment 4 Daniel Walsh 2008-12-02 15:50:53 UTC


*** This bug has been marked as a duplicate of bug 473786 ***