Zusammenfassung: SELinux is preventing /usr/bin/kdm "read" access on .dmrc. Detaillierte Beschreibung: SELinux denied access requested by kdm. It is not expected that this access is required by kdm and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Zugriff erlauben: You can generate a local policy module to allow this access - see FAQ (http://docs.fedoraproject.org/selinux-faq-fc5/#id2961385) Please file a bug report. Zusätzliche Informationen: Quellkontext system_u:system_r:xdm_t:s0-s0:c0.c1023 Zielkontext unconfined_u:object_r:home_root_t:s0 Zielobjekte .dmrc [ file ] Quelle kdm Quellpfad /usr/bin/kdm Port <Unbekannt> Host (removed) RPM-Pakete der Quelle kdm-4.4.2-5.fc12 RPM-Pakete des Ziels Richtlinien-RPM selinux-policy-3.6.32-108.fc12 SELinux aktiviert True Richtlinientyp targeted Enforcing-Modus Enforcing Plugin-Name catchall Rechnername (removed) Plattform Linux (removed) 2.6.32.11-99.fc12.x86_64 #1 SMP Mon Apr 5 19:59:38 UTC 2010 x86_64 x86_64 Anzahl der Alarme 2 Zuerst gesehen So 18 Apr 2010 01:36:28 CEST Zuletzt gesehen So 18 Apr 2010 01:36:34 CEST Lokale ID 3cd0339d-d24a-40d4-b7ae-d0cf4f2cb920 Zeilennummern Raw-Audit-Meldungen node=(removed) type=AVC msg=audit(1271547394.720:26117): avc: denied { read } for pid=1899 comm="kdm" name=".dmrc" dev=sda2 ino=2099352 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:home_root_t:s0 tclass=file node=(removed) type=SYSCALL msg=audit(1271547394.720:26117): arch=c000003e syscall=2 success=no exit=-13 a0=41f7c7 a1=800 a2=0 a3=17 items=0 ppid=1829 pid=1899 auid=500 uid=500 gid=500 euid=500 suid=500 fsuid=500 egid=500 sgid=500 fsgid=500 tty=(none) ses=1 comm="kdm" exe="/usr/bin/kdm" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) Hash String generated from catchall,kdm,xdm_t,home_root_t,file,read audit2allow suggests: #============= xdm_t ============== allow xdm_t home_root_t:file read;
This looks like you have a mislabeled home dir? What is the path to your homedir? Does running restorecon -R -v ~/, change any labels?
Reporter, could you please reply to the previous question? If you won't reply in one month, I will have to close this bug as INSUFFICIENT_DATA. Thank you. -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers
*** Bug 598664 has been marked as a duplicate of this bug. ***
home dir = /home/Alexander The mistake appears with the user change as well as in some cases after input root - password.
Did you tried to run this command : restorecon -R -v ~/ Loging in as root is not something we want to allow.