lost most gdm features/functions after today's update...

Tom London selinux at gmail.com
Fri Jul 7 13:52:37 UTC 2006


On 7/7/06, Jeremy Katz <katzj at redhat.com> wrote:
> On Fri, 2006-07-07 at 07:40 -0400, Steve Grubb wrote:
> > On Friday 07 July 2006 01:34, Clifford Snow wrote:
> > > Localhost kernel: audit(1152216505.513:285): avc: denied {execmem } for
> > > pid=2408 com="metacity" scontext=user_u:system_r:unconfined_t:s0
> > > tcontext=user_u:system_r:unconfined_t:s0 tclass=process
> > >
> > > Is this an error of metacity or a problem with selinux?
> >
> > This would appear to be a problem with metacity (or one of the libraries it
> > links with). Programs that are securely written do not need execmem. The
> > question is why did this pop up yesterday? Looking through the rawhide
> > reports, I don't see metacity being updated this week. I suspect its caused
> > by a library that links with metacity.
>
> It's libGL (as becomes obvious when you go to launch metacity from a
> terminal :-)
>
> This was being looked at yesterday afternoon by some of the X guys
>
> Jeremy
>
Intersting, but this still fails for me if I boot with 'enforcing=0'
and/or I set 'allow_execmem=1'.

tom

[I'm running on an Thinkpad X41, with Intel 915GM/GMS/910GML Express
graphics card.]
-- 
Tom London




More information about the fedora-test-list mailing list