Research Menu

.
Skip Search Box

SELinux Mailing List

Re: selinux-policy-mls is now available for your testing pleasure.

From: Paul Moore <paul.moore_at_hp.com>
Date: Wed, 20 Apr 2005 13:04:47 -0400


Paul Moore wrote:
> Stephen Smalley wrote:
> 

>> On Tue, 2005-04-19 at 18:29 -0400, James Morris wrote:
>>
>>>> 12 Rebooted normally, i.e. 'rhgb quiet 5', and X failed to start
>>>
>>>
>>> Haven't tried X yet, not sure it's supposed to work.
>>
>>
>> Works for me.  Of course, you do need to have the allow_execmem=1
>> boolean enabled for X to run, but that is independent of
>> MLS.  /usr/sbin/setsebool -P allow_execmem=1.  Did the RPM include a
>> booleans file?
>>

>
> Yes it did, however, the allow_execmem entry was missing. I added it
> via setsebool and verified that it was in the booleans.local file and
> rebooted to see gdm startup this time but I could not login - according
> to the xsession-errors file Xlib failed to connect to the display, which
> was running on ":0.0".
>

I was playing with this some more and a regular user was allowed to login via gdm - just not root. 

-- 
. paul moore . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
. paul.moore@hp.com                                      hewlett packard
. (603) 884-5056                                          linux security

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Wed 20 Apr 2005 - 13:09:45 EDT
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

  
bottom
National Security Agency / Central Security Service