R: Re: Selinuxprevents from graphical login

antonio.montagnani at alice.it antonio.montagnani at alice.it
Mon Nov 29 20:10:25 UTC 2010



>----Messaggio originale----
>Da: dwalsh at redhat.com
>Data: 29-nov-2010 19.07

>A: "Community support for Fedora users"<users at lists.fedoraproject.org>
>Cc: 
"antonio montagnani"<antonio.montagnani at alice.it>
>Ogg: Re: Selinuxprevents 
from graphical login
>
>-----BEGIN PGP SIGNED MESSAGE-----
>Hash: SHA1
>
>On 
11/27/2010 10:37 AM, antonio montagnani wrote:
>> antonio ha scritto / said the 
following    il giorno/on 27/11/2010 16:08:
>>> Chris Tyler ha scritto / said 
the following    il giorno/on 27/11/2010
>>> 15:58:
>>>> On Sat, 2010-11-27 at 
15:47 +0100, Antonio M wrote:
>>>>> On one of my  systems, if Selinux is 
targeted I cannot access to
>>>>> graphical session, as password would be wrong 
(all users and root)
>>>>> As soon as Selinux=0 at boot time system works fine.
System is fully updated
>>>>> I cannot find a related bug in bugzilla...
>>>>> 
Tnx
>>>> Did you try relabeling the whole system? May be required if you've run

>>>> with selinux off (permissive is better if you want to temporarily
>>>> 
disable selinux):
>>>>
>>>> 	touch /.autorelabel; reboot
>>>>
>>>> -Chris
>>>>

>>> I used the graphical management tool to relabel it, that should do what
>>> 
you suggest (and I rebooted): now I will see what happens in Permissive
>>> 
mode.
>>> Any way to see a log of Selinux on my system???
>>>
>>> Tnx
>>>
>>> 
Antonio
>> 
>> I rebooted in permissive mode and of course I can login: but I 
have a 
>> long list of Selinux ACV that I cannot decode :-(
>> 
>
>Please send 
them to me, and I will look at them.  Or run them through
>audit2allow
>

>ausearch -m avc -ts recent | audit2allow
>
>Should give me an idea of what you 
are seeing.
>-----BEGIN PGP SIGNATURE-----
>Version: GnuPG v1.4.11 (GNU/Linux)

>Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/>

>iEYEARECAAYFAkzz+e4ACgkQrlYvE4MpobPEYQCgxqCd1suWFwKB1CQ5qitxoYk6

>CtcAnRzEq40m1TjLas4RRi6i4zuSAyoQ
>=DiF2
>-----END PGP SIGNATURE-----
>


have 
a look to https://bugzilla.redhat.com/show_bug.cgi?id=657727
Now It seems to 
have been solved thannks to the help of Miroslav Grepl
Please let me have your 
comments

Rgds

Antonio



More information about the users mailing list