On Wed, 2009-05-20 at 22:36 -0400, Eamon Walsh wrote:
> If you're willing to compile the X server from source, you could apply
> the attached patch and use gdb to attach to the running X server (this
> has to be done over an ssh connection).
>
> Break on the SELinuxNullPermissionHappened function and reproduce the
> GLXMakeCurrent avc, hopefully the breakpoint will fire and you can get a
> backtrace.
>
> Also there is another patch that will fix the x_device null avc's
> (attached).
>
I tried it again this time with some hints from eparis. It got me a little bit further:
(gdb) break SELinuxNullPermissionHappened
Breakpoint 1 at 0x7f86941f9370: file xselinux.c, line 433.
(gdb) continue
Continuing.
Program received signal SIGPIPE, Broken pipe.
0x00000030040d67ab in writev () from /lib64/libc.so.6
(gdb) bt
#0 0x00000030040d67ab in writev () from /lib64/libc.so.6
#1 0x00000000004eedec in _XSERVTransSocketWritev (
ciptr=<value optimized out>, buf=0x7fff9c426f00, size=1)
at /usr/include/X11/Xtrans/Xtranssock.c:2184
#2 0x00000000004ea85d in FlushClient (who=<value optimized out>,
oc=<value optimized out>, __extraBuf=<value optimized out>,
extraCount=<value optimized out>) at io.c:899
#3 0x00000000004eb301 in FlushAllOutput () at io.c:649
#4 0x0000000000446d75 in Dispatch () at dispatch.c:456
#5 0x000000000042d0d5 in main (argc=<value optimized out>,
argv=0x7fff9c427198, envp=<value optimized out>) at main.c:397
(gdb) quit
The program is running. Quit anyway (and detach it)? (y or n) y
LND: Sending signal 13 to process 2456
Detaching from program: /usr/bin/Xorg, process 2456
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
