Tutorial on setting up SELinux / X Server

Eamon Walsh ewalsh at tycho.nsa.gov
Fri Dec 4 02:25:41 UTC 2009


On 12/03/2009 08:59 PM, Richard Chapman wrote:
> I have a Cetos 5.4 system ruining x - and I also have some boot time x 
> related denials. I therefore tried the below setsebool but got the 
> following errors:
>
> setsebool -P xserver_object_manager on
>
> ibsemanage.dbase_llist_set: record not found in the database
> libsemanage.dbase_llist_set: could not set record value
> Could not change boolean xserver_object_manager
> Could not change policy booleans
>
>
> Is this because Centos is different - or is there a typo in the above 
> command?
>
> Richard.
>
>   


I don't think that RHEL 5.4 has this boolean.  Look in /selinux/booleans
and see if there is a file called xserver_object_manager.

However, if you are getting boot-time X denials then it's probably not
anything to do with the X object manager.  That sounds like a kernel
policy problem.  What are the denials?



-- 

Eamon Walsh 
National Security Agency




More information about the fedora-selinux-list mailing list