OK. I think I figured this out.
/etc/rc.sysinit now recreates /tmp/.ICE-unix on each boot. It appears that in doing so,
it does not assign it the expected context, so it is 'defaulting' to
system_u:object_r:initrc_tmp_t.
If I boot up single user, do a 'restorecon -v /tmp/.ICE-unix' to assign it context
system_u:object_r:xdm_xserver_tmp_t, and then an 'exit', the resulting
graphical login works just fine.
Looks like /etc/rc.sysinit needs to do a 'restorecon':
[ -n "$SELINUX" ] && restorecon /tmp/.ICE-unix
after creating it....Bugzilla'ed here: https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=127099
tom
[If you decide to try manually edit /etc/rc.d/rc.sysinit to add the 'restorecon', make sure you do a 'restorecon /etc/rc.d/rc.sysinit' before rebooting. Otherwise, your system will not be happy. (In case that happens, reboot with 'enforcing=0' and do the 'restorecon /etc/rc.d/rc.sysinit')].
