Gentoo Archives: gentoo-hardened

From: Chris PeBenito <pebenito@g.o>
To: Victor Banatean <Pie_Oh_Pah@×××.net>
Cc: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] Can't start eterm and xterm as normal user using X under SELinux and hardened gcc
Date: Thu, 30 Sep 2004 02:45:11
Message-Id: 1096512261.29413.4.camel@gorn.pebenito.net
In Reply to: Re: [gentoo-hardened] Can't start eterm and xterm as normal user using X under SELinux and hardened gcc by Victor Banatean
1 On Wed, 2004-09-29 at 18:01 +0200, Victor Banatean wrote:
2 > Markus Dittrich wrote:
3 > >On Fri, 24 Sep 2004 23:44:15 +0200, Victor Banatean <pie_oh_pah@×××.net> wrote:
4 > >>Nevertheless I found a solution, but I do not prefer it, so I'll will
5 > >>try it again
6 > >>tomorrow. If anyone have a good idea or hint,please tell it.
7 > >Try running "strace Eterm" as your user. If you're lucky that'll show
8 > >you what device/file Eterm needs to open, but doesn't have permission
9 > >to.
10 > >
11 > I'd tried it and the result is that Eterm need permission on /dev/pty*.
12 >
13 > So I'd done the following:
14 >
15 > 1. chmod 666 /dev/pty* => not sufficient
16
17 most likely you need to chmod 0666 /dev/ptmx /dev/tty
18
19 > 2. ls -Z /dev => "Segmentation fault"
20 > How could I determine the context?
21
22 getfilecon /dev/foo. This ls bug is fixed in the ~x86 (still!)
23 coreutils.
24
25
26 > 6. ACCEPT_KEYWORDS="~x86" emerge --pretend --verbose udev
27 > => no success
28
29 I need to put in the docs that udev is not supported right now.
30
31 --
32 Chris PeBenito
33 <pebenito@g.o>
34 Developer,
35 Hardened Gentoo Linux
36 Embedded Gentoo Linux
37
38 Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
39 Key fingerprint = B0E6 877A 883F A57A 8E6A CB00 BC8E E42D E6AF 9243

Attachments

File name MIME type
signature.asc application/pgp-signature