Here are two xdm fixes that i had to apply: Allow xdm_t to read gconf_etc_t else gconf sanity check failes and gnome power manager fails. Signed-off-by: Dominick Grift <domg472@xxxxxxxxx> ---------------------- policy/modules/services/xserver.te --------------------- index 65d2018..18aa8ef 100644 @@ -722,6 +722,7 @@ optional_policy(` gnome_manage_gconf_home_files(xdm_t) gnome_read_config(xdm_t) + gnome_read_gconf_config(xdm_t) gnome_append_gconf_home_files(xdm_t) ') xdm_t read xdm_etc_t link files. Signed-off-by: Dominick Grift <domg472@xxxxxxxxx> ---------------------- policy/modules/services/xserver.te --------------------- index 168e133..dd29803 100644 @@ -409,6 +409,7 @@ allow xdm_t xconsole_device_t:fifo_file { getattr setattr }; +allow xdm_t xdm_etc_t:lnk_file read_lnk_file_perms; read_files_pattern(xdm_t, xdm_etc_t, xdm_etc_t) manage_dirs_pattern(xdm_t, xkb_var_lib_t, xkb_var_lib_t)
Attachment:
pgpH0QVR2G6ir.pgp
Description: PGP signature
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux