On 12/02/2009 10:22 PM, Tyler Durvik wrote:
> Greetings,
>
> I am looking for a tutorial, or instructions, on how to set up an X
> Server to work with SELinux. I have fedora 12 installed and ready to
> go. Does anyone have links/pages to where I may find this
> information?
>
> Thanks
>
Turn on the xserver_object_manager boolean and restart X, as described
by Dominick. AVC's generated by X will go in Xorg.0.log as well as
audit.log (as type "USER_AVC").
The current X policy in F12 probably will generate AVC's on a full
desktop session. There is a much improved X policy upstream that is not
in F12 yet. I will bug Dan to ship it in his next update.
If you want to run the X server in permissive mode but keep the rest of
the system enforcing put the following in xorg.conf:
Section "Module"
SubSection "extmod"
Option "SELinux mode permissive"
EndSubSection
EndSection
--
Eamon Walsh
National Security Agency
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
