SELinux is preventing kdm (xdm_t) "execute" bootloader_exec_t

[Garry T. Williams]

On Sunday 02 August 2009 16:25:27 Rex Dieter wrote:
> On 08/02/2009 02:47 PM, Garry T. Williams wrote:
> > What's up with this?  What is kdm up to here?
> 
> If you modify /etc/kde/kdmrc away from the default
> BootManager=None
> to
> BootManager=Grub
> 
> You'll get the policy denials per the aforementioned bug, true.  It 
> requires low-level access to the bootloader to control the next 
> boot, which Dan wasn't willing to grant by default.  If you wish to 
> do so anyway, you'll need add your own selinux policy to explictly 
> allow that (or disable selinux).
> 
> Does that cover your question(s)?

Hmm.  I don't have a /etc/kde/kdmrc file on my system.  But I found 
/etc/kde/kdm/kdmrc and sure enough, it had BootManager=Grub in it.  I 
changed it to None and that fixed it.

I don't recall making this change, but thanks for the help.

-- 
Garry T. Williams --- +1 678 656-4579