Bug 503337
| Summary: | SELinux is preventing kdm (xdm_t) "unlink" to .Xauthority (user_home_t) | ||||||
|---|---|---|---|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Kvikende <kvikende> | ||||
| Component: | selinux-policy | Assignee: | Daniel Walsh <dwalsh> | ||||
| Status: | CLOSED WORKSFORME | QA Contact: | Fedora Extras Quality Assurance <extras-qa> | ||||
| Severity: | medium | Docs Contact: | |||||
| Priority: | low | ||||||
| Version: | 11 | CC: | dwalsh, jkubin, mgrepl, rdieter | ||||
| Target Milestone: | --- | ||||||
| Target Release: | --- | ||||||
| Hardware: | All | ||||||
| OS: | Linux | ||||||
| Whiteboard: | |||||||
| Fixed In Version: | Doc Type: | Bug Fix | |||||
| Doc Text: | Story Points: | --- | |||||
| Clone Of: | Environment: | ||||||
| Last Closed: | 2009-09-18 05:21:01 UTC | Type: | --- | ||||
| Regression: | --- | Mount Type: | --- | ||||
| Documentation: | --- | CRM: | |||||
| Verified Versions: | Category: | --- | |||||
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |||||
| Cloudforms Team: | --- | Target Upstream Version: | |||||
| Embargoed: | |||||||
| Attachments: |
|
||||||
Fixed in selinux-policy-3.6.12-44.fc11 This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle. Changing version to '11'. More information and reason for this action is here: http://fedoraproject.org/wiki/BugZappers/HouseKeeping |
Created attachment 346008 [details] the selinux alert Description of problem: I logged in to my desktop and I saw SElinux blinking about requiring attention. There I saw thatSELinux has prevented kdm to unlink .Xauthority. I have no idea what it means but since kdm is trustable, it seems odd that SELinux should block that behaviour. Why would kdm do it if it wasn't intended? :S Version-Release number of selected component (if applicable): kdm-4.2.3-5.fc11 and selinux-policy-3.6.12-39.fc11 How reproducible: I don't know exactly. I have it set to autologin into the last desktop I used which is, at the moment, GNOME. However I like kdm much better than gdm so I'm using it.