Small SELinux issue with kdm and grub [solved]

Marko Vojinovic vvmarko at panet.co.yu
Mon Mar 9 22:22:22 UTC 2009


On Monday 09 March 2009 14:48, Daniel J Walsh wrote:
> Login programs are becoming a lot larger, lots of software needs to be
> run in order to allow "Assisted Technologies".  Most of this software
> can be executed by a non logged in user, so a bug in the software could
> compromise the system.  Allowing the login program to manipulate the
> boot environment might allow a slightly compromised login program to
> turn off security options like SELinux, or change other kernel options.
>
> All this for arguable value.

I agree completely. The only thing that is a mystery for me is what is kdm 
exactly trying to do with grub here? What does a login manager has in common 
with the bootloader?

Though I didn't do any research to find out... :-)

Best, :-)
Marko





More information about the users mailing list