Bug 615838 - Unable to execute xauth when using ssh -Y
Summary: Unable to execute xauth when using ssh -Y
Status: CLOSED INSUFFICIENT_DATA
Alias: None
Product: Fedora
Classification: Fedora
Component: selinux-policy
Version: 12
Hardware: All
OS: Linux
low
medium
Target Milestone: ---
Assignee: Daniel Walsh
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Keywords:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2010-07-19 04:26 UTC by Ignacio Vazquez-Abrams
Modified: 2010-08-20 10:11 UTC (History)
2 users (show)

(edit)
Clone Of:
(edit)
Last Closed: 2010-08-20 10:11:30 UTC

Attachments (Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Description Ignacio Vazquez-Abrams 2010-07-19 04:26:51 UTC 
Description of problem:
When using ssh -Y, SELinux prevents xauth from being executed on the server.

Version-Release number of selected component (if applicable):
selinux-policy-(none):3.6.32-118.fc12.noarch

How reproducible:
Every time

Steps to Reproduce:
1. Try to use ssh -Y to ssh into a F12 machine
  
Actual results:
"sh: /usr/bin/xauth: Permission denied"

type=SELINUX_ERR msg=audit(1279513152.238:190): security_compute_sid:  invalid context system_u:system_r:xauth_t:s0-s0:c0.c1023 for scontext=system_u:system_r:unconfined_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xauth_exec_t:s0 tclass=process

Expected results:
Should work

Additional info:
Comment 1 Miroslav Grepl 2010-07-19 13:28:20 UTC 
Could you add your output of the following command

ps -eZ | grep sshd

on F12 machine.
Note You need to log in before you can comment on or make changes to this bug.