I installed the xguest package into a fresh F11 install, and when clicking on the guest account, was prompted for a password. It should just log me in with no password prompted for.
Are you in enforcing mode? It will prompt in permissive mode.
Yes. It is in enforcing mode.
Then the other cause of this is you have an xguest_t process still running on the system killall -9 -Z xguest_t
Same problem here. In /var/log/secure I get: Jun 13 23:33:13 leela pam: gdm-password[5166]: pam_unix(gdm-password:auth): authentication failure; logname= uid=0 euid=0 tty=:0 ruser= rhost= user=xguest So gdm is using /etc/pam.d/gdm-password. This file contains no reference to pam_selinux_permit.so. After I copied the line from /etc/pam.d/gdm , it started to work.
Dan, there was no previous xguest session running. Have you tested it yourself?
Ray is this my bug or yours?
James not with F11 final.
Do you need any further information? I'd like to be able to demo this at KCA in a few weeks.
James, does my workaround work for you?
(In reply to comment #9) > James, does my workaround work for you? Yes, if it is added as the first line. I don't know what the implications of that are.
It's my bug. The work around is the correct fix.
James, you want to grab the latest policy out of koji also.
I didn't see an selinux_permit line in /etc/pam.d/gdm, but there was one in /etc/pam.d/xdm and using that one worked for me.
Ping? A confirmed fix has been known for a month, but it's not applied yet.
Hi, I built a fix for this some time ago, but apparently never pushed an update after building the fix. Will do so shortly. Thank you for the ping.
Minor correction: I fixed this some time ago, but apparently never committed it, built it or pushed an update.
gdm-2.26.1-13.fc11 has been submitted as an update for Fedora 11. http://admin.fedoraproject.org/updates/gdm-2.26.1-13.fc11
gdm-2.26.1-13.fc11 has been pushed to the Fedora 11 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update gdm'. You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-8063
gdm-2.26.1-13.fc11 has been pushed to the Fedora 11 stable repository. If problems still persist, please make note of it in this bug report.