Red Hat Bugzilla – Bug 466884
Add rule for slim login manager
Last modified: 2008-10-15 10:02:49 EDT
http://slim.berlios.de/ is packaged for Fedora and we are using it for the Sugar spin but it doesn't interact properly with selinux. In particular selinux doesn't allow ssh-keygen to write new keys.
I'm no selinux expert but if I enable pam_selinux.so and add the following rule to selinux-policy things work as expected:
/usr/sbin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)
Is this the correct way to fix the issue? I will submit a patch for slim if this rule is added to selinux-policy.
Sorry the rule above has a typo. It's really:
/usr/bin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)
Yes that is correct.
Fixed in selinux-policy-3.5.12-2.fc10.noarch