Description of problem: I booted F17 Beta RC3 i686 LiveCD system in virt-manager and wanted to re-login. My use case was to force fallback mode, which needs logging out and in again. After logging out, there was a brief flash of new X/gdm spawning (black screen with rotating cursor) and then X probably crashed (graphics errors displayed for a short time) and the whole VM shut down. I reproduced it many times. The VM either shuts down completely, or X/gdm crashes several times and then I appear logged in again on display :1. There is a selinux error displayed, bug 810447. I never logged out correctly. I tried the same on x86_64 LiveCD and logging out worked flawlessly there. It means it's a problem of i686 only. I can't collect any logs when the VM shuts down completely. So I at least collected some logs when X/gdm crashed repeatedly, but then logged me again. I tried both qxl+spice and cirrus+vnc, happens in both. I didn't test on bare metal machine, I'll try to do that. Version-Release number of selected component (if applicable): Fedora 17 Beta RC3 LiveCd *i686* gdm-3.4.0.1-1.fc17.i686 xorg-x11-server-common-1.12.0-2.fc17.i686 How reproducible: always Steps to Reproduce: 1. boot i686 livecd 2. select Log out 3. see either VM shut off or X crashes and then automatic log-in again
Created attachment 575654 [details] audit.log
Created attachment 575655 [details] dmesg
Created attachment 575656 [details] messages
Created attachment 575657 [details] rpm-qa.out
Created attachment 575658 [details] Xorg.0.log
Created attachment 575659 [details] Xorg.0.log.old
Created attachment 575660 [details] Xorg.1.log
Created attachment 575661 [details] gdm :0.log
Created attachment 575662 [details] gdm :0.log.1
Created attachment 575663 [details] gdm :0-slave.log
Created attachment 575664 [details] gdm :0-slave.log.1
Created attachment 575665 [details] gdm :1.log
Created attachment 575666 [details] gdm :1-slave.log
What I see in the logs: dmesg: [ 51.077447] gnome-shell[1367]: segfault at 0 ip 01df70dd sp bffcdb00 error 4 in libaccountsservice.so.0.0.0[1de4000+39000] Xorg.0.log.old: [ 52.805] Server terminated successfully (0). Closing log file. gdm :0.log.1: Server terminated successfully (0). Closing log file. gdm :0-slave.log.1: gdm-autologin][1052]: pam_unix(gdm-autologin:session): session closed for user liveuser gdm-simple-slave[841]: WARNING: Child process 1052 was already dead. gdm-simple-slave[841]: WARNING: Unable to kill session worker process
Proposing as Beta blocker due to criterion: "All release-blocking desktops' offered mechanisms (if any) for shutting down, logging out and rebooting must work" https://fedoraproject.org/wiki/Fedora_17_Beta_Release_Criteria This is confirmed to be broken just on the LiveCD system, I haven't tested on installed system (I'll try that soon). But I believe there are valid use cases even on livecd system to log out (e.g. changing desktop to fallback mode if there are some rendering problems). LiveCDs are often used for fixing broken systems, therefore hard shutdown without unmounting disks correctly could be potentially harmful.
This *does not* happen in an installed system in the exactly same VM from that particular LiveCD, only in the live environment itself.
I can reproduce this on bare-metal machine with i686 LiveCD dd'd to USB stick. However, it never powered-off hard for me, it always just respawned another desktop session with liveuser automatically logged in. It has one further drawback however - you can't power off the system, if you don't know the hidden Alt key in GNOME's user menu. Logging out doesn't work -> no poweroff/restart options visible.
I can confirm this. I've got the same result with liveCD in KVM. +1 blocker
I reproduced this as well. If I add 'selinux=0' to the boot args, I can logout of the live session without issue.
re-assigning to selinux-policy. -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers
The AVC for this has been reported as https://bugzilla.redhat.com/show_bug.cgi?id=810447 . Marking that as a dupe of this.
*** Bug 810447 has been marked as a duplicate of this bug. ***
Is this really SELinux issue? I am not able to reproduce it. I am able to log out/in in either enforcing or permissive mode. I see the same AVC msg. This tells me that gdb is executed by xdm_t because of a crash.
(In reply to comment #23) > Is this really SELinux issue? I am not able to reproduce it. I am able to log > out/in in either enforcing or permissive mode. Which livecd are you using? This only seems to affect i686, not x86_64. When I try with the F17 beta RC3 Desktop i686 livecd, I see the problem almost every time I log out unless I used 'selinux=0' at boot time.
I use the same from http://dl.fedoraproject.org/pub/alt/stage/17-Beta.RC3/Live/i686/ could you boot with enforcing=0 and then $ semodule -DB re-login $ ausearch -m avc -ts recent |audit2allow
Created attachment 575843 [details] syslog when error on logout causes machine restart (In reply to comment #25) > could you boot with enforcing=0 and then > > $ semodule -DB > > re-login > > $ ausearch -m avc -ts recent |audit2allow I tried this the livecd with enforcing=0 and ran semodule -DB. Every time I logged out, the VM that the livecd is in restarted and I can't run the second command. I tried again, tailing the system log on a serial console when I logged out and was able to capture a gdm crash.
Ok, I see it now.
My observation is the following: This happens either enforcing or permissive mode. This does not happen with selinux=disabled. Dan, any idea?
Could this be accountsservice or gdm doing a libselinux call and crashing?
A little late but: This bug was discussed at the 2012-04-06 Fedora 17 beta blocker review meeting. We agreed to accept this as a blocker for Fedora 17 beta due to conditional violation (i686 Live CD) of the following Fedora 17 beta release criterion [1] : All release-blocking desktops' offered mechanisms (if any) for shutting down, logging out and rebooting must work [1] https://fedoraproject.org/wiki/Fedora_17_Beta_Release_Criteria
(In reply to comment #29) > Could this be accountsservice or gdm doing a libselinux call and crashing? Yes, this is also my suspect.
We have found the problem in gdm, totally unrelated to SELinux. The problem arises from the move from consolekit to systemd-login for discovering the seats associated with a logged in user. Ray is fixing it now.
gdm-3.4.0.1-4.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/gdm-3.4.0.1-4.fc17
I built a test live image with the new gdm, and it still appears to be broken. Ray is investigating further. -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers
(In reply to comment #32) > We have found the problem in gdm, totally unrelated to SELinux. Maybe that's a different problem? Because this one is supposed to be influenced by selinux=disabled.
The gdm problem is random since he was walking off into memory, perhaps changing the SELinux settings changed the way memory was layed out and you don't hit the problem. But I believe this issue has nothing to do with SELinux.
gdm-3.4.0.1-5.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/gdm-3.4.0.1-5.fc17
Package gdm-3.4.0.1-5.fc17: * should fix your issue, * was pushed to the Fedora 17 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing gdm-3.4.0.1-5.fc17' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-5573/gdm-3.4.0.1-5.fc17 then log in and leave karma (feedback).
fixed the issue here (can log out and back in on the live cd). I added karma on bodhi, just posting here as this bug is listed as a Beta blocking bug. -- Fedora Bugzappers volunteer triage team https://fedoraproject.org/wiki/BugZappers
Just commenting that I upgraded an installed F17 i686 (with selinux disabled) to gdm-3.4.0.1-4.fc17 and it crashed at login. I had to downgrade back to gdm-3.4.0.1-1.fc17 I'm waiting now for gdm-3.4.0.1-5.fc17 to be available here.
gdm-3.4.0.1-5.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.
*** Bug 810137 has been marked as a duplicate of this bug. ***
gdm-3.4.1-1.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/gdm-3.4.1-1.fc17
gdm-3.4.1-1.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.
This actually happened when I logged in to Fedora 17 64 bit on a regular systems. Please let me know if I can get additional information for you. Thanks, Devon