Bug 502344 - SELinux blocks emacs
SELinux blocks emacs
Product: Fedora
Classification: Fedora
Component: selinux-policy (Show other bugs)
All Linux
medium Severity high
: ---
: ---
Assigned To: Daniel Walsh
Fedora Extras Quality Assurance
Depends On:
  Show dependency treegraph
Reported: 2009-05-24 07:08 EDT by John J. McDonough
Modified: 2009-11-18 08:09 EST (History)
6 users (show)

See Also:
Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2009-11-18 08:09:44 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description John J. McDonough 2009-05-24 07:08:31 EDT
Description of problem:
SELinux blocks emace

Version-Release number of selected component (if applicable):
F11 preview, emacs 22.3

How reproducible:

Steps to Reproduce:
1. Set EDITOR, VISUAL to emacs
2. Open terminal
3. crontab -e
Actual results:

Display :0.0 unavailable, simulating -nw

[1]+  Stopped                 crontab -e

SELinux is preventing emacs (admin_crontab_t) "connectto" xserver_t. 
SELinux is preventing emacs (admin_crontab_t) "setpgid" admin_crontab_t. 
SELinux is preventing gnome-terminal (admin_crontab_t) "signal" unconfined_t. 

Expected results:
Open emacs showing crontab

Additional info:
Comment 1 Daniel Novotny 2009-05-25 04:15:14 EDT
since "crontab -e" invokes user-defined editor (EDITOR, VISUAL) and this editor can use X, admin_crontab_t policy should be probably modified to allow this...

or is it possible to run the editor in unconfined_t?

reassigning to selinux-policy, reassign back to me if you think this is a bug in emacs (or to cronie if you think cron owner can fix this)
Comment 2 Daniel Walsh 2009-05-26 08:41:35 EDT
Fixed in selinux-policy-3.6.12-42.fc11.noarch

I will run it in unoconfined.
Comment 3 Bug Zapper 2009-06-09 12:28:32 EDT
This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.

More information and reason for this action is here:

Note You need to log in before you can comment on or make changes to this bug.