Created attachment 502076 [details]
raw log

Description of problem:
In some scenarios gdm seems to run gnome-keyring-daemon

Version-Release number of selected component (if applicable):
selinux-policy-3.9.16-24.fc16.noarch

How reproducible:
Not sure but setting UID_MIN and GID_MIN in /etc/login.defs to 2000 may (or may not) trigger it. This event occurred when Fedora set it to 1000 a few days ago.

Additional info:

allow xdm_dbusd_t gkeyringd_exec_t:file { read execute open execute_no_trans };
allow xdm_dbusd_t random_device_t:chr_file read;
allow xdm_dbusd_t self:process { getcap setcap };
allow xdm_dbusd_t session_dbusd_tmp_t:sock_file create;
allow xdm_dbusd_t system_dbusd_t:unix_stream_socket connectto;
allow xdm_dbusd_t system_dbusd_var_run_t:sock_file write;
#!!!! The source type 'xdm_dbusd_t' can write to a 'dir' of the following types:
# user_home_t, session_dbusd_tmp_t

allow xdm_dbusd_t xdm_var_lib_t:dir { write create add_name };

see raw logs enclosed