GDM problems: gdm-binary

[Paul Howarth]

Daniel B. Thurman wrote:
> Daniel B. Thurman wrote:
>> Due to reasons of my /usr space partition running out of
>> room, I had tar-copied my /usr/share directory into different
>> partition, deleted the contents of /usr/share, changed the
>> fstab to mount the /share partition /usr/share. Because there
>> is a filesystem change, I believed an autorelabel is necessary
>> to ensure that all of the selinux tags are properly labeled.

...

> I found some more problems with selinux tags and somehow it
> is not able to label files after a autorelabel which I was
> hoping it would fix but does not.  Can someone please tell
> me how to fix these problems?
> 
>>From /var/log/audit log:
> =============================================================
> type=SYSCALL msg=audit(1198252520.322:187): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfc093c0 a2=b7f6d31c a3=0 items=0 ppid=2700 pid=3667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=51 sgid=51 fsgid=51 tty=(none) comm="sendmail" exe="/usr/sbin/sendmail.sendmail" subj=system_u:system_r:sendmail_t:s0 key=(null)
> type=AVC msg=audit(1198252520.322:187): avc:  denied  { connectto } for  pid=3667 comm="sendmail" path="/var/run/spamass-milter/spamass-milter.sock" scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_stream_socket
> type=AVC msg=audit(1198252486.805:186): avc:  denied  { connectto } for  pid=3647 comm="sendmail" path="/var/run/spamass-milter/spamass-milter.sock" scontext=system_u:system_r:sendmail_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=unix_stream_socket

This looks remarkably like this bug report:
https://bugzilla.redhat.com/show_bug.cgi?id=425958

You seem to have the socket labelled as initrc_t rather than 
spamd_var_run_t, but I don't know why this should happen.

Can you post the output of:
$ ls -lZd /var/run
$ ls -laZ /var/run/spamass-milter
$ sestatus -v

>From /var/log/messages log: (Note that all of these errors are
> coming from the /usr/share that is mounted from a drive partition
> while all in / is in its own partition, but /usr/share)
> =============================================================
> Dec 21 07:50:21 linux kernel: audit(1198252191.457:5): avc:  denied  { search } for  pid=1169 comm="rhgb" name="share" dev=sda2 ino=102929 scontext=system_u:system_r:rhgb_t:s0 tcontext=user_u:object_r:default_t:s0 tclass=dir

Try unmounting /usr/share, labelling the now-empty directory as mnt_t, 
remounting /usr/share and labelling the mounted directory as usr_t.

Paul.