Description of problem: In enforcing mode gdmsetup can't write to gdm.conf. Version-Release number of selected component (if applicable): gdm-2.6.0.0-2 policy-1.9.2-10 How reproducible: 100% Steps to Reproduce: 1. Clean install. 2. Log in as root. 3. System Settings->Login Screen 4. Change the graphical greeter style. 5. Close. 6. Log out: style has not changed. Actual results: audit(1081174438.586:0): avc: denied { write } for pid=3984 exe=/usr/sbin/gdmsetup name=gdm.conf dev=hda2 ino=3836056 scontext=root:staff_r:staff_t tcontext=system_u:object_r:etc_t tclass=file audit(1081174438.586:0): avc: denied { read } for pid=3984 exe=/usr/sbin/gdmsetup name=gdm.pid dev=hda2 ino=1017147 scontext=root:staff_r:staff_t tcontext=system_u:object_r:xdm_var_run_t tclass=file audit2allow says: allow staff_t etc_t:file { write }; allow staff_t xdm_var_run_t:file { read };
Colin: any chance you could take a poke at this ?
Yep, adding to my queue.
fixed in selinux-policy-strict-1.18.2-2