Hide Forgot
Description of problem: Can't get X session because gdm is blocked by selinux because of a "denied permission" on boot Version-Release number of selected component (if applicable): gdm-3.20.1-3.fc24.x86_64 selinux-policy-3.13.1-191.14.fc24.noarch systemd-229-13.fc24.x86_64 kernel-core-4.7.2-201.fc24.x86_64 kmod-nvidia-4.7.2-201.fc24.x86_64-367.44-1.fc24.x86_64 (from akmod) (I tried with nouveau, and get the same problem) How reproducible: I dont know what has been broken on my system ; i'm affraid i can't tell exactly how to reproduce Steps to Reproduce: 1. Have a fedora upgraded to 24 from 22 2. Make updates 3. Boot Actual results: Black screen Expected results: Gdm start Additional info: If I add "enforce=0" on kernel boot command, everything starts, and if i check the last boot log, i get repeating : sept. 07 22:06:11 localhost.localdomain systemd-logind[725]: Failed to start user slice user-42.slice, ignoring: Access denied (org.freedesktop.DBus.Error.AccessDenied) sept. 07 22:06:11 localhost.localdomain systemd[1]: Created slice user-42.slice. sept. 07 22:06:11 localhost.localdomain systemd[1]: Starting User Manager for UID 42... sept. 07 22:06:11 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { start } for auid=n/a uid=0 gid=0 cmdline="/usr/lib/s exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' sept. 07 22:06:11 localhost.localdomain systemd-logind[725]: Failed to start session scope session-c1.scope: Access denied sept. 07 22:06:11 localhost.localdomain gdm-launch-environment][840]: pam_systemd(gdm-launch-environment:session): Failed to create session: Access denied sept. 07 22:06:11 localhost.localdomain gdm-launch-environment][840]: pam_unix(gdm-launch-environment:session): session opened for user gdm by (uid=0) sept. 07 22:06:11 localhost.localdomain audit[840]: USER_START pid=840 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_keyinit,pam_keyini sept. 07 22:06:11 localhost.localdomain audit[845]: USER_ACCT pid=845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:accounting grantors=pam_unix acct="gdm" exe="/usr/lib/sy sept. 07 22:06:11 localhost.localdomain audit[845]: USER_ROLE_CHANGE pid=845 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='pam: default-context=unconfined_u:unconfined_r:unconfine sept. 07 22:06:11 localhost.localdomain systemd[845]: pam_unix(systemd-user:session): session opened for user gdm by (uid=0) sept. 07 22:06:11 localhost.localdomain audit[845]: USER_START pid=845 uid=0 auid=42 ses=1 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,p sept. 07 22:06:11 localhost.localdomain audit[845]: AVC avc: denied { entrypoint } for pid=845 comm="(systemd)" path="/usr/lib/systemd/systemd" dev="sdb2" ino=1440184 scontext=unconfined_u:unconfined_r:unc sept. 07 22:06:11 localhost.localdomain systemd[845]: user: Failed at step EXEC spawning /usr/lib/systemd/systemd: Permission denied sept. 07 22:06:11 localhost.localdomain systemd[848]: pam_unix(systemd-user:session): session closed for user gdm sept. 07 22:06:11 localhost.localdomain systemd[1]: Started User Manager for UID 42. sept. 07 22:06:11 localhost.localdomain audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@42 comm="systemd" exe="/usr/lib/systemd/systemd" host sept. 07 22:06:11 localhost.localdomain audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=user@42 comm="systemd" exe="/usr/lib/systemd/systemd" hostn sept. 07 22:06:11 localhost.localdomain audit[1]: USER_AVC pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc: denied { stop } for auid=n/a uid=0 gid=0 cmdline="/usr/lib/sy exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?' sept. 07 22:06:11 localhost.localdomain systemd-logind[725]: Failed to stop user slice: Access denied sept. 07 22:06:11 localhost.localdomain systemd[1]: Stopped User Manager for UID 42. sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: (--) Log file renamed from "/var/log/Xorg.pid-852.log" to "/var/log/Xorg.0.log" sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: X.Org X Server 1.18.4 sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Release Date: 2016-07-19 sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: X Protocol Version 11, Revision 0 sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Build Operating System: 4.6.4-301.fc24.x86_64 sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Current Operating System: Linux localhost.localdomain 4.7.2-201.fc24.x86_64 #1 SMP Fri Aug 26 15:58:40 UTC 2016 x86_64 sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Kernel command line: BOOT_IMAGE=/vmlinuz-4.7.2-201.fc24.x86_64 root=UUID=13541bf6-171f-486c-bf52-1fa2c858e895 ro rd.md=0 rd.lvm=0 rd.dm sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Build Date: 25 August 2016 05:27:31PM sept. 07 22:06:11 localhost.localdomain /usr/libexec/gdm-x-session[847]: Build ID: xorg-x11-server 1.18.4-4.fc24
This message is a reminder that Fedora 24 is nearing its end of life. Approximately 2 (two) weeks from now Fedora will stop maintaining and issuing updates for Fedora 24. It is Fedora's policy to close all bug reports from releases that are no longer maintained. At that time this bug will be closed as EOL if it remains open with a Fedora 'version' of '24'. Package Maintainer: If you wish for this bug to remain open because you plan to fix it in a currently maintained version, simply change the 'version' to a later Fedora version. Thank you for reporting this issue and we are sorry that we were not able to fix it before Fedora 24 is end of life. If you would still like to see this bug fixed and are able to reproduce it against a later version of Fedora, you are encouraged change the 'version' to a later Fedora version prior this bug is closed as described in the policy above. Although we aim to fix as many bugs as possible during every release's lifetime, sometimes those efforts are overtaken by events. Often a more recent Fedora release includes newer upstream software that fixes bugs or makes them obsolete.
Fedora 24 changed to end-of-life (EOL) status on 2017-08-08. Fedora 24 is no longer maintained, which means that it will not receive any further security or bug fix updates. As a result we are closing this bug. If you can reproduce this bug against a currently maintained version of Fedora please feel free to reopen this bug against that version. If you are unable to reopen this bug, please file a new report against the current release. If you experience problems, please add a comment to this bug. Thank you for reporting this bug and we are sorry it could not be fixed.