http://slim.berlios.de/ is packaged for Fedora and we are using it for the Sugar spin but it doesn't interact properly with selinux. In particular selinux doesn't allow ssh-keygen to write new keys.

I'm no selinux expert but if I enable pam_selinux.so and add the following rule to selinux-policy things work as expected:

/usr/sbin/slim -- gen_context(system_u:object_r:xdm_exec_t,s0)

Is this the correct way to fix the issue? I will submit a patch for slim if this rule is added to selinux-policy.