Hmm, doesn't seem to be working: This is on a fully updated F9 install, selinux in enforcing mode, xguest installed. When trying to login at the Guest user: Summary: SELinux is preventing dbus-daemon (xguest_dbusd_t) "read write" to socket (xguest_t). Detailed Description: SELinux denied access requested by dbus-daemon. It is not expected that this access is required by dbus-daemon and this access may signal an intrusion attempt. It is also possible that the specific version or configuration of the application is causing it to require additional access. Allowing Access: You can generate a local policy module to allow this access - see FAQ (<a href="http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385">http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385</a>) Or you can disable SELinux protection altogether. Disabling SELinux protection is not recommended. Please file a bug report (<a href="http://bugzilla.redhat.com/bugzilla/enter_bug.cgi">http://bugzilla.redhat.com/bugzilla/enter_bug.cgi</a>) against this package. Additional Information: Source Context xguest_u:xguest_r:xguest_dbusd_t:s0 Target Context xguest_u:xguest_r:xguest_t:s0 Target Objects socket [ unix_stream_socket ] Source dbus-daemon Source Path /bin/dbus-daemon Port <Unknown> Host dhcp-0016533596-c5-74 Source RPM Packages dbus-1.2.4-1.fc9 Target RPM Packages Policy RPM selinux-policy-3.3.1-103.fc9 Selinux Enabled True Policy Type targeted MLS Enabled True Enforcing Mode Enforcing Plugin Name catchall Host Name dhcp-0016533596-c5-74 Platform Linux dhcp-0016533596-c5-74 2.6.26.6-79.fc9.i686 #1 SMP Fri Oct 17 14:52:14 EDT 2008 i686 i686 Alert Count 1 First Seen Tue Nov 4 10:20:32 2008 Last Seen Tue Nov 4 10:20:32 2008 Local ID 6306343f-6166-4ca6-ada5-770e4c3a3a91 Line Numbers Raw Audit Messages host=dhcp-0016533596-c5-74 type=AVC msg=audit(1225812032.80:22): avc: denied { read write } for pid=2820 comm="dbus-daemon" path="socket:[29372]" dev=sockfs ino=29372 scontext=xguest_u:xguest_r:xguest_dbusd_t:s0 tcontext=xguest_u:xguest_r:xguest_t:s0 tclass=unix_stream_socket host=dhcp-0016533596-c5-74 type=SYSCALL msg=audit(1225812032.80:22): arch=40000003 syscall=11 success=yes exit=0 a0=804c8f7 a1=bfcd858c a2=bfcd99b4 a3=7 items=0 ppid=2819 pid=2820 auid=35027 uid=35027 gid=35027 euid=35027 suid=35027 fsuid=35027 egid=35027 sgid=35027 fsgid=35027 tty=(none) ses=2 comm="dbus-daemon" exe="/bin/dbus-daemon" subj=xguest_u:xguest_r:xguest_dbusd_t:s0 key=(null) Any help/ideas? <div class="gmail_quote">On Tue, Nov 4, 2008 at 9:37 AM, Matt Nicholson <<a href="mailto:sjoeboo@sjoeboo.com">sjoeboo@sjoeboo.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> Hmm, interesting. I'm rebuilding my image with that package installed, and selinux in enforcing mode on a test vm right now, and I'll see how it goes. Thanks, Matt<div> <div></div><div class="Wj3C7c"> <div class="gmail_quote">On Mon, Nov 3, 2008 at 3:36 PM, Doncho N. Gunchev <<a href="mailto:dgunchev@dev.ezsearch.net" target="_blank">dgunchev@dev.ezsearch.net</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div><div></div><div>Matt Nicholson wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> I'm looking to get a guest account setup, possibly on a whole host of workstations I run running F9. These workstations auth against and ldap/kerberos setup we have, fyi. so far, my idea is to create a local "guest" user, and user pam_mount to create a tmpfs home directory for the guest user on login, so that it will be removed on logout. I want this user to only be able to login though GDM. Does any one have any experiance doing something like this? is there any though of taking the Guest user system Ubutu recently implemented on? Any help/ideas would be great. Matt </blockquote></div></div> What about <a href="http://james-morris.livejournal.com/25640.html" target="_blank">http://james-morris.livejournal.com/25640.html</a> :-) -- fedora-list mailing list <a href="mailto:fedora-list@redhat.com" target="_blank">fedora-list@redhat.com</a> To unsubscribe: <a href="https://www.redhat.com/mailman/listinfo/fedora-list" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-list</a> Guidelines: <a href="http://fedoraproject.org/wiki/Communicate/MailingListGuidelines" target="_blank">http://fedoraproject.org/wiki/Communicate/MailingListGuidelines</a> </blockquote></div> </div></div></blockquote></div>