Stephen Smalley wrote:
On Tue, 2008-07-08 at 14:02 -0500, Xavier Toth wrote:
Using MLS enforcing in a gnome-terminal with context
user_u:user_r:user_t:s0-s15:c0.c1023 I run newrole and get these
results
newrole -l s1-s1 -- -c "gnome-terminal --disable-factory"
Password:
**
** ERROR:(terminal.c:1016):new_terminal_with_options: assertion
failed: (profile)
I think Joe straced this and has a little more info if he'd like to chime in.
So, I assume that this does not happen if in permissive mode?
What AVC denials occur? Run semodule -DB and retry if there are no AVCs
by default.
What is the application trying to do at that point (look at the source
code and/or ask on the gnome lists)? What are the possible failure
conditions there? What external dependencies does it have?
strace output might help if you have it.
Sorry to have bothered you. Looks like it has something to do with
polyinstantiation of ~/.gnome or ~/.gnome2. We haven't seen this with
previous versions even when polyinstantiating :(
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
