All of lore.kernel.org
 help / color / mirror / Atom feed
From: Justin Smith <jsmith@mcs.drexel.edu>
To: Stephen Smalley <sds@tislabs.com>
Cc: selinux@tycho.nsa.gov
Subject: Re: X windows with i810 chip
Date: 03 Dec 2001 15:05:09 -0500	[thread overview]
Message-ID: <1007409909.1588.0.camel@vorpal> (raw)
In-Reply-To: <Pine.GSO.4.33.0112031009550.4293-100000@raven>

On Mon, 2001-12-03 at 10:13, Stephen Smalley wrote:
> 
> indirectly through /usr/X11R6/bin/Xwrapper, which is labeled with the
> xserver_exec_t type.  This type causes a domain transition from user_t
> to user_xserver_t.  So I don't know why your X server is running in the
> wrong domain.
> 
Yes, I saw the reason for this problem. The file_contexts listing
only assigns xserver_t to /usr/X11R6/bin/Xwrapper when many systems name
the X server X or XFree86 (mine does the latter). I assigned  the
xserver_t type to both of these files and it solved the problem.

I am now able to run X windows and even gdm, although gdm has some
strange problems. When running under it, the newrole command gets the
error message: 'unable to find user in passwd'. I do not get this
message when running under ordinary X windows.

Another anomaly: in Redhat 7.1, /dev/hdc can be a hard drive OR a cdrom
(!). The gnome desktop wouldn't start initially because the system
thought it was trying to access a fixed disk.

In addition, MAKEDEV should be assigned a type that is some sort of
system script rather than a device_t.

Thanks very much for your comments. I'll create a domain for postgres.
> 
--


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

  reply	other threads:[~2001-12-03 20:08 UTC|newest]

Thread overview: 6+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2001-12-02 15:51 X windows with i810 chip Justin Smith
2001-12-02 22:21 ` Russell Coker
2001-12-03 15:13 ` Stephen Smalley
2001-12-03 20:05   ` Justin Smith [this message]
2001-12-03 20:18     ` Stephen Smalley
2001-12-03 20:22     ` Stephen Smalley

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1007409909.1588.0.camel@vorpal \
    --to=jsmith@mcs.drexel.edu \
    --cc=sds@tislabs.com \
    --cc=selinux@tycho.nsa.gov \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.