I am trying to start gnome-keyring through PAM (Console Login) on a Minimal Fedora version. I added the required lines into /etc/pam.d/login as per https://wiki.archlinux.org/title/GNOME/Keyring#Using_the_keyring After successful login, the keyring is unavailable. Instead, I get AVC entries in the log stating that "SELinux is preventing login from execute access on the file gnome-keyring-daemon" Reproducible: Always Steps to Reproduce: 1. Install Fedora minimal with sway, gnome-keyring, gnome-keyring-pam 2. Update all to the recent packages as of today. Include the following in /etc/pam.d/login # after the last auth auth optional pam_gnome_keyring.so # after the last session session optional pam_gnome_keyring.so auto_start 3. reboot and log in via console Actual Results: Selinux AVC entries (prevented) Expected Results: A running gnome-keyring-daemon with unlocked login keys
Hi, Can you gather AVC denials, with full auditing if possible? https://fedoraproject.org/wiki/SELinux/Debugging#Enable_full_auditing
Created attachment 2095147 [details] ausearch output
Hi, Can you try copr build in https://github.com/fedora-selinux/selinux-policy/pull/2745 Checks -> rpm-build?
(In reply to Zdenek Pytela from comment #3) > Hi, > Can you try copr build in > > https://github.com/fedora-selinux/selinux-policy/pull/2745 > Checks -> rpm-build? Installed and running. No AVC on login. Thanks
Thanks for confirming.
FEDORA-2025-37b5c05ba4 (selinux-policy-41.45-1.fc42) has been submitted as an update to Fedora 42. https://bodhi.fedoraproject.org/updates/FEDORA-2025-37b5c05ba4
FEDORA-2025-37b5c05ba4 has been pushed to the Fedora 42 testing repository. Soon you'll be able to install the update with the following command: `sudo dnf upgrade --enablerepo=updates-testing --refresh --advisory=FEDORA-2025-37b5c05ba4` You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2025-37b5c05ba4 See also https://fedoraproject.org/wiki/QA:Updates_Testing for more information on how to test updates.
FEDORA-2025-37b5c05ba4 (selinux-policy-41.45-1.fc42) has been pushed to the Fedora 42 stable repository. If problem still persists, please make note of it in this bug report.