• Paul Moore <paul.moore@hp.com> wrote:
  > Paul Moore wrote:
  > > Stephen Smalley wrote:
  > >
  > >> On Tue, 2005-04-19 at 18:29 -0400, James Morris wrote:
  > >>
  > >>>> 12 Rebooted normally, i.e. 'rhgb quiet 5', and X failed to start
  > >>>
  > >>>
  > >>> Haven't tried X yet, not sure it's supposed to work.
  > >>
  > >>
  > >> Works for me. Of course, you do need to have the allow_execmem=1
  > >> boolean enabled for X to run, but that is independent of
  > >> MLS. /usr/sbin/setsebool -P allow_execmem=1. Did the RPM include
  > a
  > >> booleans file?
  > >>
  > >
  > > Yes it did, however, the allow_execmem entry was missing. I added
  > it
  > > via setsebool and verified that it was in the booleans.local file
  > and
  > > rebooted to see gdm startup this time but I could not login -
  > according
  > > to the xsession-errors file Xlib failed to connect to the display,
  > which
  > > was running on ":0.0".
  > >
  >
  > I was playing with this some more and a regular user was allowed to
  > login via gdm - just not root.
  >
  

Hi Paul,

I saw a similar problem. In my case /tmp/gconfd-root had a type other than tmp_t (I think it was sysadm_tmp or something like that). It is possible that it was there from a previous login of root when MLS was not active. Try removing that directory and see if you can login as root.

-Janak

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.