Created attachment 339221 [details] First SElinux alert Description of problem: After selecting the keyboard layout in the installer, SEtroubleshoot shows two errors: "SELinux is preventing the loadkeys from using potentially mislabeled files (Documents)." and "SELinux is preventing loadkeys (loadkeys_t) "write" to /home/liveuser/.xsession-errors (user_home_t). " Version-Release number of selected component (if applicable): 3.6.12-2.fc11 How reproducible: not tested Steps to Reproduce: 1. Boot with Fedora-11-Snap1-x86_64-Live-KDE 2. Start "Install to Hard Drive" 3. Choose a keyboard other than English Actual results: SElinux denials displayed by SEtrubleshoot Expected results: Installation proceeds without warnings Additional info:
Created attachment 339222 [details] Second SElinux alert
THe .xsession-errors directory is mislabeled. It should be xdm_home_t. Kde is leaking a file descriptor to /dev/mapper/control to loadkeys as well as a open file descriptor to /home/livecd/Document. All of these can be ignored. Setroubleshoot shoud probably not be installed on a livecd, since there is not much that a user can do to fix these problems.
*** This bug has been marked as a duplicate of bug 484370 ***
Well this is not quite a duplicate since it also has .xsession-errors mislabeled in the livecd image.
ok, there's 2 bugs here, let's focus this one on .xsession-errors mislabeling, which certainly isn't a kde issue then. Where to assign that? livecd-tools?
-> LiveCD for now.
.xsession-errors will just get created by the first thing which outputs to it -- kdm possibly? It's not created by the livecd; we just use adduser to create the user's homedir.
ok, then it *is* a dup (and same cause). ??
Well if kde was running as xdm_t (Which it should, it should have created the file with the correct context xdm_home_t.) If something else created like a process running as the user, then it will get labelled incorrectly. xdm seems to create the file itself before execing the user shell, If kde execs the user shell and this creates it, it could be a problem.
A fixed kdelibs landed * Sat Apr 18 2009 Rex Dieter <rdieter> 4.2.2-6 - squash leaky file descriptors in kdeinit (kde#180785,rhbz#484370) So, let's close this, unless there's new evidence of it still being present. *** This bug has been marked as a duplicate of bug 484370 ***