[gentoo-hardened] Can't start eterm and xterm as normal user using X under SELinux and hardened gcc

[Victor Banatean]

Hi everyone,

I have a problem using eterm and xterm when starting X as a normal
user, as soon as I switch to root no problem at all.

This is the error message for eterm and xterm:
Eterm: Error: Can't open pseudo-tty -- No such file or directory
Eterm: Error: Unable to run sub-command

xterm: Error 32, errno 2: No such file or directory
Reason: get_pty: not enough ptys

I looked things up at the Gentoo-forums.

My system:

SELinux with hardened gcc-3.3.4-r1
kernel-2.6.7-hardened-r8
pentium4
xorg--x11-6.7.0-r2
eterm-0.9.2-r6
xterm-191

That is what I tried/looked up so far:

1. Change /etc/fstab
    => none   /dev/pts   devpts   defaults   0 0

2. change to normal user and type export DISPLAY=:0
    and than type startx

3. compile /dev fs into kernel, following the options I used:
    => /dev file system support (obsulete)
    => Automatically mount at boot
    => debug devfs

4. Change /etc/security/selinux/src/policy/users
    => user victor roles {sysadm_r staff_r}

5. This is my /etc/devfsd.conf
....................................................................................................... 

....................................................................................................... 

# Uncomment the following if you want to set the group to "tty" for the
# pseudo-tty devices. This is necessary so that mesg(1) can later be 
used to
# enable/disable talk requests and wall(1) messages.
REGISTER        ^pty/s.*     PERMISSIONS -1.tty  0600
REGISTER        ^pts/.*      PERMISSIONS -1.tty  0600

6. Also compiled into the kernel:
    => [*] Legacy (BSD) PTY support
    => (111) Maximum number of legacy PTY in use

    => [*] /proc file system support
    => [ ] /dev file system support (OBSOLETE)
    => [*] /dev/pts Extended Attributes
    => [*]   /dev/pts Security Labels
    => [*] Virtual memory file system support (former shm fs)
    => [ ] HugeTLB file system support

Number 1,2,4 nothing changed, if I tried number 3 the system
crashed next after reboot.

At the moment I got badly stuck.
It would be great if someone could help me or give me a hint
where to look next.

Thanks in advance.
Victor

--
gentoo-hardened@g.o mailing list