[Bug 252368] kdm_greet denials

[bugzilla at redhat.com]

Please do not reply directly to this email. All additional
comments should be made in the comments box of this bug report.

Summary: kdm_greet denials


https://bugzilla.redhat.com/show_bug.cgi?id=252368





------- Additional Comments From dwalsh at redhat.com  2008-04-06 06:46 EST -------
/var/lib/kdm should be part of the kdm package and would there fore be labeled
correctly and not need to be created.

I will dontaudit the lnusertemp writing to the /root directory although this
seems strange.

I will allow it to manage fonts, allowing it to write to usr_t is a bit more
problematic.

The problem I have with a lot of this is giving a program that is run with not
authentication power to manipulate the machine seems very dangerous.

-- 
Configure bugmail: https://bugzilla.redhat.com/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug, or are watching someone who is.