Description of problem: Compared with Fedora 12, in Fedora 13 (and Fedora 14 development) the text mode console mouse-support using "gpm" doesn't work in "mc" anymore for normal user accounts and SELinux enforcing mode (targeted). 1. yum -y install gpm 2. sudo service gpm start 3. CTRL+ALT+F2 or any other virtual console 4. log in as normal user 5. start mc and try to enter directories with mouse double-click Version-Release number of selected component (if applicable): $ rpm -q mc gpm mc-4.7.4-1.fc13.x86_64 gpm-1.20.6-9.fc13.x86_64 How reproducible: Always If running "setenforce 0" and then logging in as normal user, it works.
With setenforce 1 when starting mc: Oct 9 20:38:27 localhost /usr/sbin/gpm[2560]: *** err [daemon/processconn.c(121)]: Oct 9 20:38:27 localhost /usr/sbin/gpm[2560]: stat on /dev/tty3 fails in processConn With setenforce 0 when starting mc: Oct 9 20:40:24 localhost /usr/sbin/gpm[2560]: *** info [daemon/processrequest.c(42)]: Oct 9 20:40:24 localhost /usr/sbin/gpm[2560]: Request on 6 (console 2)
Is there a way to create a local exception/policy for this?
Could you see if there are any avc messages in /var/log/audit/audit.log? Or dmesg?
Nothing (and no sealert either). The quoted entries from /var/log/messages is the only evidence of something going wrong.
Try turning off dontaudit rules by executing. semodule -DB Then execute your commnads, you will see the AVC messages then. semodule -B Will turn the dontaudit rules back on .
Created attachment 453006 [details] audit.log excerpt These are the messages in audit.log when starting "mc" on virtual console 2 and double-clicking a directory.
Miroslav can you add userdom_use_user_terminals(gpm_t)
Fixed in selinux-policy-3.7.19-66.fc13
(In reply to comment #8) > Fixed in selinux-policy-3.7.19-66.fc13 Thank you very much! When will the repo receive the update?
Packages are available from koji for now http://koji.fedoraproject.org/koji/buildinfo?buildID=200289
selinux-policy-3.7.19-69.fc13 has been submitted as an update for Fedora 13. https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-69.fc13
selinux-policy-3.7.19-69.fc13 has been pushed to the Fedora 13 testing repository. If problems still persist, please make note of it in this bug report. If you want to test the update, you can install it with su -c 'yum --enablerepo=updates-testing update selinux-policy'. You can provide feedback for this update here: https://admin.fedoraproject.org/updates/selinux-policy-3.7.19-69.fc13
selinux-policy-3.7.19-69.fc13 has been pushed to the Fedora 13 stable repository. If problems still persist, please make note of it in this bug report.