Re: [gentoo-hardened] Can't start eterm and xterm as normal user using X under SELinux and hardened gcc

[Barry Dunn]

On Fri, 24 Sep 2004 16:51:11 +0200
Victor Banatean <Pie_Oh_Pah@×××.net> wrote:

> Hi everyone,
>
> I have a problem using eterm and xterm when starting X as a normal
> user, as soon as I switch to root no problem at all.
>
> This is the error message for eterm and xterm:
> Eterm: Error: Can't open pseudo-tty -- No such file or directory
> Eterm: Error: Unable to run sub-command
>
> xterm: Error 32, errno 2: No such file or directory
> Reason: get_pty: not enough ptys
>
> I looked things up at the Gentoo-forums.
>
> My system:
>
> SELinux with hardened gcc-3.3.4-r1
> kernel-2.6.7-hardened-r8
> pentium4
> xorg--x11-6.7.0-r2
> eterm-0.9.2-r6
> xterm-191
>
> That is what I tried/looked up so far:
>
> 1. Change /etc/fstab
>     => none   /dev/pts   devpts   defaults   0 0
>
> 2. change to normal user and type export DISPLAY=:0
>     and than type startx
>
> 3. compile /dev fs into kernel, following the options I used:
>     => /dev file system support (obsulete)
>     => Automatically mount at boot
>     => debug devfs
>
> 4. Change /etc/security/selinux/src/policy/users
>     => user victor roles {sysadm_r staff_r}
>
> 5. This is my /etc/devfsd.conf
> .....................................................................
> ..................................
>
> .....................................................................
> ..................................
>
> # Uncomment the following if you want to set the group to "tty" for
> the# pseudo-tty devices. This is necessary so that mesg(1) can later
> be used to
> # enable/disable talk requests and wall(1) messages.
> REGISTER        ^pty/s.*     PERMISSIONS -1.tty  0600
> REGISTER        ^pts/.*      PERMISSIONS -1.tty  0600
>
> 6. Also compiled into the kernel:
>     => [*] Legacy (BSD) PTY support
>     => (111) Maximum number of legacy PTY in use
>
>     => [*] /proc file system support
>     => [ ] /dev file system support (OBSOLETE)
>     => [*] /dev/pts Extended Attributes
>     => [*]   /dev/pts Security Labels
>     => [*] Virtual memory file system support (former shm fs)
>     => [ ] HugeTLB file system support
>
> Number 1,2,4 nothing changed, if I tried number 3 the system
> crashed next after reboot.
>
> At the moment I got badly stuck.
> It would be great if someone could help me or give me a hint
> where to look next.
>
> Thanks in advance.
> Victor
>
> --
> gentoo-hardened@g.o mailing list
>

Are you using udev-030? I had the same problem recently and
emerging udev-032 fixed it. In both cases I had tty udev perms
set to root:tty:0660, but I assumed the error was caused by a tty entry
in 50-udev.rules, which in 032 was changed from
KERNEL="tty[p-za-e][0-9a-f]*", NAME="tty/s%n", SYMLINK="%k"
to
KERNEL="tty[p-za-e][0-9a-f]*", NAME="pty/s%n", SYMLINK="%k"

Hope that helps,

Barry

--
gentoo-hardened@g.o mailing list