Selinux is denying access to files with the default label, default_t and preventing ck-get-x11-serv (consolekit_t) "search" xdm_var_run_t.

Antonio Olivares olivares14031 at yahoo.com
Tue Apr 28 12:42:03 UTC 2009


> /.kde is not a labeling problem, it is a bug in kdm that
> thinks its 
> homedir is /.  So it put its the .kde directory there and
> this /.kde got 
> the default_t label.  You can change this by executing
> # semanage fcontext -a -t xdm_var_run_t
> '/\.kde(/.*)?'
> # restorecon -R -v /.kde
> 
> The consolekit bug is fixed in the -20 policy package.

Applied :)

[olivares at gray ~]$ su -
Password:
[root at gray ~]# semanage fcontext -a -t xdm_var_run_t '/\.kde(/.*)?'
[root at gray ~]# restorecon -R -v /.kde
restorecon reset /.kde context system_u:object_r:default_t:s0->system_u:object_r:xdm_var_run_t:s0
restorecon reset /.kde/share context system_u:object_r:default_t:s0->system_u:object_r:xdm_var_run_t:s0
restorecon reset /.kde/share/config context system_u:object_r:default_t:s0->system_u:object_r:xdm_var_run_t:s0
[root at gray ~]#


Thanks for your help.

Regards,

Antonio


      




More information about the fedora-selinux-list mailing list