Bug 495353

Summary: Fedora-11-Snap1-x86_64-Live-KDE "SELinux is preventing loadkeys..." when installing to hard disk
Product: [Fedora] Fedora Reporter: Markku Kolkka <markku.kolkka>
Component: kdebaseAssignee: Than Ngo <than>
Status: CLOSED DUPLICATE QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: low Docs Contact:
Priority: low    
Version: rawhideCC: arbiter, davidz, dcantrell, dwalsh, jkubin, jreznik, katzj, kevin, ltinkl, mgrepl, rdieter, smparrish, than
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2009-05-26 18:51:00 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
First SElinux alert
none
Second SElinux alert none

Description Markku Kolkka 2009-04-12 10:08:45 UTC
Created attachment 339221 [details]
First SElinux alert

Description of problem:
After selecting the keyboard layout in the installer, SEtroubleshoot shows two errors: "SELinux is preventing the loadkeys from using potentially mislabeled files (Documents)." and "SELinux is preventing loadkeys (loadkeys_t) "write" to /home/liveuser/.xsession-errors (user_home_t). "

Version-Release number of selected component (if applicable):
3.6.12-2.fc11

How reproducible:
not tested

Steps to Reproduce:
1. Boot with Fedora-11-Snap1-x86_64-Live-KDE
2. Start "Install to Hard Drive"
3. Choose a keyboard other than English
  
Actual results:
SElinux denials displayed by SEtrubleshoot

Expected results:
Installation proceeds without warnings

Additional info:

Comment 1 Markku Kolkka 2009-04-12 10:09:36 UTC
Created attachment 339222 [details]
Second SElinux alert

Comment 2 Daniel Walsh 2009-04-13 12:38:00 UTC
THe .xsession-errors directory is mislabeled.  It should be xdm_home_t.

Kde is leaking a file descriptor to /dev/mapper/control to loadkeys as well as a open file descriptor to /home/livecd/Document.

All of these can be ignored.

Setroubleshoot shoud probably not be installed on a livecd, since there is not much that a user can do to fix these problems.

Comment 3 Rex Dieter 2009-04-13 12:49:37 UTC

*** This bug has been marked as a duplicate of bug 484370 ***

Comment 4 Daniel Walsh 2009-04-13 13:44:11 UTC
Well this is not quite a duplicate since it also has .xsession-errors mislabeled in the livecd image.

Comment 5 Rex Dieter 2009-04-13 13:47:37 UTC
ok, there's 2 bugs here, let's focus this one on .xsession-errors mislabeling, which certainly isn't a kde issue then.  Where to assign that?  livecd-tools?

Comment 6 Rex Dieter 2009-04-13 13:50:13 UTC
-> LiveCD for now.

Comment 7 Jeremy Katz 2009-04-13 17:08:08 UTC
.xsession-errors will just get created by the first thing which outputs to it -- kdm possibly?  It's not created by the livecd; we just use adduser to create the user's homedir.

Comment 8 Rex Dieter 2009-04-13 17:16:25 UTC
ok, then it *is* a dup (and same cause).  ??

Comment 9 Daniel Walsh 2009-04-13 17:59:14 UTC
Well if kde was running as xdm_t (Which it should, it should have created the file with the correct context xdm_home_t.)  If something else created like a process running as the user, then it will get labelled incorrectly.  xdm seems to create the file itself before execing the user shell, If kde execs the user shell and this creates it, it could be a problem.

Comment 10 Rex Dieter 2009-05-26 18:51:00 UTC
A fixed kdelibs landed
* Sat Apr 18 2009 Rex Dieter <rdieter> 4.2.2-6
- squash leaky file descriptors in kdeinit (kde#180785,rhbz#484370)

So, let's close this, unless there's new evidence of it still being present.

*** This bug has been marked as a duplicate of bug 484370 ***