Re: [gentoo-hardened] SeLinux system_u:system_r:initrc_t inside KDE

[Sven Vermeulen]

On Thu, Aug 11, 2011 at 2:38 PM, Udo Siewert <algenib@×××××××.com> wrote:

> don't use /etc/init.d/xdm to start KDE but start it by the 'startx'
> command with an .xinitrc file in /home/user which should contain 'exec
> startkde'.
>
>
SELinux-wise, it is fine to use xdm, gdm, kdm or whatever. However, it is
possible that our policies are not correct yet to handle this. So we'll need
to figure that out first ;-)

What context does the gdm/xdm/kdm binary have on your system? Where is the
binary located?

It looks like the context should be xdm_exec_t, offered through the xserver
module. Is sec-policy/selinux-xserver installed on your system?

Wkr,
  Sven Vermeulen