Bug 477121

Description of problem:
SeLinux prevents X11 session management running. This seems to be a consolekit interaction.
There is consequent failure of PackageKit etc.

Nov 20 00:45:57 Updated: selinux-policy-3.3.1-107.fc9.noarch
Nov 20 00:50:57 Updated: selinux-policy-targeted-3.3.1-107.fc9.noarch
Dec 14 01:32:54 Updated: selinux-policy-3.3.1-111.fc9.noarch
Dec 14 01:33:59 Updated: selinux-policy-targeted-3.3.1-111.fc9.noarch
(I'm running targeted/enforcing)

Can't find a way to get ConsoleKit details, but 
ck-list-sessions 0.2.10

How reproducible:
Always

Steps to Reproduce:
1. Start X session
2. Run Package installer (or anything else that depends on ConsoleKit)

Actual results:
Package installer fails to launch (no messages, just appears in the list of applications at the screen bottom for a few seconds, then disappears without launching a window).

Expected results:
Package installer runs normally

Additional info:
Although the symptoms are slightly different, I think this is probably the same problem as I previously documented as Bug 476402 (the primary difference in that case being that the X11 session was running from vnc) - I finally got an opportunity to run the machine with a directly connected monitor. I'm raising a separate bug mainly to make sure it's clear that it's not just a vncserver problem.

I note that I may not be the only user reporting this problem as arising recently:
http://n2.nabble.com/Nautilus-doesn%27t-start-td1633015.html
seems to be referring to a similar problem.

setroubleshoot reports a problem with ck-get-x11-serv (I assume it's the cause
of the above). See sel_ckgetx11serv.pdf

I don't think it's just a labeling problem, as this problem recurred
immediately after an autorelabel. However I can't guarantee that the
autorelabel was successful, as selinux reported some problems with restorecon
at about the time the autorelabel should have been happening (see
sel_restorecon.pdf). I can't figure any way to check this.