Archives
Archives
| From: | Sven Vermeulen <sven.vermeulen@××××××.be> | ||
|---|---|---|---|
| To: | gentoo-hardened@l.g.o | ||
| Subject: | Re: [gentoo-hardened] SeLinux system_u:system_r:initrc_t inside KDE | ||
| Date: | Fri, 12 Aug 2011 22:26:09 | ||
| Message-Id: | CAPzO=Ny7vzeH6NzxwgMq+D=CRmueKQ+3ZNM24Lg3Nnm98F00BQ@mail.gmail.com | ||
| In Reply to: | Re: [gentoo-hardened] SeLinux system_u:system_r:initrc_t inside KDE by Udo Siewert |
||
| 1 | On Thu, Aug 11, 2011 at 7:25 PM, Udo Siewert <algenib@×××××××.com> wrote: |
| 2 | |
| 3 | > /usr/bin/kdm system_u:object_r:xdm_exec_t |
| 4 | > /usr/bin/xdm system_u:object_r:xdm_exec_t |
| 5 | > |
| 6 | > When starting KDE by /etc/init.d/xdm 'id -Z' -> |
| 7 | > system_u:system_r:xdm_t |
| 8 | > |
| 9 | > and all KDE processes -> system_u:system_r:xdm_t |
| 10 | > |
| 11 | |
| 12 | Hmm... assuming xdm works through some PAM configuration, can you tell me |
| 13 | how /etc/conf.d/xdm (or kdm, gdm, whatever) looks like? |
| 14 | |
| 15 | If it doesn't source system-auth (which is where we put the pam_selinux.so |
| 16 | call in) that might be the reason... |
| 17 | |
| 18 | Wkr, |
| 19 | Sven Vermeulen |
| Subject | Author |
|---|---|
| Re: [gentoo-hardened] SeLinux system_u:system_r:initrc_t inside KDE | Udo Siewert <algenib@×××××××.com> |
| Re: [gentoo-hardened] SeLinux system_u:system_r:initrc_t inside KDE | Mike Edenfield <kutulu@××××××.org> |