Description of problem: I can't seem to login as "Guest" either on GNOME 3 on Fedora 18 or the Fedora 18 remix with XFCE. When I select "Guest" from the GDM login screen, it waits a while before coming back with error message saying "A problem has occurred.. and the system can't recover".. My system is yum updated at the point of filing this bug. SELinux is in enforcing mode and I see that xguest is mapped to the SELinux user xguest_u. It seems to work fine on my Fedora 17 installation which I also tried. Note that, I am talking about "out of the box" experience in both cases. I did not make any changes to the policies. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. Install xguest 2. Choose "Guest" as the user while logging in. 3. Actual results: Crash. Expected results: GDM Session with xguest. Additional info:
Could try to look for AVC msgs?
Also happens to me, no way to enter Guest account, have not found any "denied" warnings in /var/log/audit/audit.log
What does /var/log/secure say? Also ps -eZ | grep xguest See if you have any xguest_t processes running.
Created attachment 697281 [details] Secure Log Attached secure.log
Created attachment 697282 [details] Audit Log audit.log grep guest audit.log grep denied nothing shows
ps -eZ | grep xguest does not show nothing
d5f9b542848ab6260451ac1a082c76496333ea99 8014d39532e3582e4ec167393c53ebb813c392ce 496b1c4d62435b3b0dd959da9354348a388addf9 Needed from Rawhide to make xguest work again.
backported.
Fixed the issue by these steps (TESTED ON A VIRTUAL MACHINE NOT IN MY PRODUCTION MACHINE, I AM NO SELINUX EXPERT SO MAYBE THESE STEPS ARE NO REALLY GOOD) 1) First we make sure we do not have any denied logs in audit “cat /var/log/audit/audit.log | grep denied” 2) Disable the dontaudit rules “semodule -DB” 3) Change user and enter Guest session until error occurs 4) Enter to your user again and allow all the denied logs “grep denied /var/log/audit/audit.log | audit2allow -M xguest” “semodule -i xguest.pp” 5) Enable dontaudit rules again “semodule -B” No you can enter the guest session and until now have not found any issues.
(In reply to comment #7) > d5f9b542848ab6260451ac1a082c76496333ea99 > 8014d39532e3582e4ec167393c53ebb813c392ce > 496b1c4d62435b3b0dd959da9354348a388addf9 > > > Needed from Rawhide to make xguest work again. What's that mean? Is it supposed to be fixed now? I'm having this problem as well, on F18 with updates (but not updates-testing).
# rpm -q selinux-policy Fixes have been added to F18.
(In reply to comment #11) > # rpm -q selinux-policy > > Fixes have been added to F18. Installed selinux-policy-3.11.1-87.fc18.noarch from updates-tesping; xguest logins still crash.
(In reply to comment #11) > # rpm -q selinux-policy > > Fixes have been added to F18. Installed selinux-policy-3.11.1-87.fc18.noarch from updates-testing; xguest logins still crash.
I just had it working after booting with nomodeset. It's also always worked in my F19 VM (except for bug 954095) which I thought was that it was fixed in F19/rawhide, but now I realize that the VM is also nomodeset.
Just tried it on F18 with MATE. It works. Package Versions: xguest-1.0.10-5.fc18.noarch selinux-policy-3.11.1-91.fc18.noarch I will try on a GNOME 3 installation and update.
Why closed? It's still not working for me with KMS.