Pretty unbelievable !!

[Tim Waugh]

On Thu, May 06, 2004 at 02:51:37PM -0500, Bob Gustafson wrote:

> Also, I noticed that when I have a gnome terminal window open and do 'su',
> the following lines appear in /var/log/messages.
> 
> Is this an unneeded artifact coming from the X window system? The fact that
> it was denied does not seem to affect the rootness of tasks after doing the
> 'su'
> 
> May  6 14:37:31 hoho2 su(pam_unix)[3755]: session opened for user root by
> user1(uid=500)
> May  6 14:37:31 hoho2 kernel: audit(1083872251.894:0): avc:  denied  {
> add_name } for  pid=3755 exe=/bin/su name=.xautholimVP
> scontext=user_u:user_r:user_su_t tcontext=root:object_r:staff_home_dir_t
> tclass=dir

This is in bugzilla.  It means you can't start X applications as root
and have them use your X display seemlessly.

Tim.
*/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20040506/c4ae7e6e/attachment.sig>