----Messaggio originale---- Da: dwalsh@redhat.com Data: 29-nov-2010 19.07
A: "Community support for Fedora users"users@lists.fedoraproject.org Cc:
"antonio montagnani"antonio.montagnani@alice.it
Ogg: Re: Selinuxprevents
from graphical login
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On
11/27/2010 10:37 AM, antonio montagnani wrote:
antonio ha scritto / said the
following il giorno/on 27/11/2010 16:08:
Chris Tyler ha scritto / said
the following il giorno/on 27/11/2010
15:58:
On Sat, 2010-11-27 at
15:47 +0100, Antonio M wrote:
On one of my systems, if Selinux is
targeted I cannot access to
graphical session, as password would be wrong
(all users and root)
As soon as Selinux=0 at boot time system works fine.
System is fully updated
I cannot find a related bug in bugzilla...
Tnx
Did you try relabeling the whole system? May be required if you've run
with selinux off (permissive is better if you want to temporarily
disable selinux):
touch /.autorelabel; reboot
-Chris
I used the graphical management tool to relabel it, that should do what
you suggest (and I rebooted): now I will see what happens in Permissive
mode.
Any way to see a log of Selinux on my system???
Tnx
Antonio
I rebooted in permissive mode and of course I can login: but I
have a
long list of Selinux ACV that I cannot decode :-(
Please send
them to me, and I will look at them. Or run them through
audit2allow
ausearch -m avc -ts recent | audit2allow
Should give me an idea of what you
are seeing.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/%3E
iEYEARECAAYFAkzz+e4ACgkQrlYvE4MpobPEYQCgxqCd1suWFwKB1CQ5qitxoYk6
CtcAnRzEq40m1TjLas4RRi6i4zuSAyoQ =DiF2 -----END PGP SIGNATURE-----
have a look to https://bugzilla.redhat.com/show_bug.cgi?id=657727 Now It seems to have been solved thannks to the help of Miroslav Grepl Please let me have your comments
Rgds
Antonio