Bug 120038 - gdmsetup can't write to gdm.conf
gdmsetup can't write to gdm.conf
Product: Fedora
Classification: Fedora
Component: gdm (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Colin Walters
Mike McLean
: SELinux
Depends On:
Blocks: 122683
  Show dependency treegraph
Reported: 2004-04-05 10:10 EDT by Tim Waugh
Modified: 2007-11-30 17:10 EST (History)
4 users (show)

See Also:
Fixed In Version: 1.18.2-2
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2005-09-04 21:06:31 EDT
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Tim Waugh 2004-04-05 10:10:30 EDT
Description of problem:
In enforcing mode gdmsetup can't write to gdm.conf.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1. Clean install.
2. Log in as root.
3. System Settings->Login Screen
4. Change the graphical greeter style.
5. Close.
6. Log out: style has not changed.
Actual results:
audit(1081174438.586:0): avc:  denied  { write } for  pid=3984
exe=/usr/sbin/gdmsetup name=gdm.conf dev=hda2 ino=3836056
scontext=root:staff_r:staff_t tcontext=system_u:object_r:etc_t tclass=file
audit(1081174438.586:0): avc:  denied  { read } for  pid=3984
exe=/usr/sbin/gdmsetup name=gdm.pid dev=hda2 ino=1017147
scontext=root:staff_r:staff_t tcontext=system_u:object_r:xdm_var_run_t

audit2allow says:
allow staff_t etc_t:file { write };
allow staff_t xdm_var_run_t:file { read };
Comment 1 Mark McLoughlin 2004-06-04 09:17:11 EDT
Colin: any chance you could take a poke at this ? 
Comment 2 Colin Walters 2004-06-04 09:59:35 EDT
Yep, adding to my queue.
Comment 3 Daniel Walsh 2004-11-06 00:48:16 EST
fixed in selinux-policy-strict-1.18.2-2

Note You need to log in before you can comment on or make changes to this bug.