kdm 3.3 is deleting and recreating /var/run/xdmctl

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

heads up for something to watch out for: kdm 3.3 is deleting and
then recreating /var/run/xdmctl, presumably as a way of clearing
out any messy sockets in that directory.

kdm 3.2.2 did not behave in this manner.

it means that people doing a new install of kdm under selinux
may run into problems.

e.g. if dpkg has not been given write permission to /var/run
in order for /var/run/xdmctl to be created at postinst time.

e.g. if postinst does _not_ create this directory, it doesn't exist,
and kdm attempts to create it for the first time.

i am not allowing the xdm_t permission to unlink and create in
var_run_t: consequently, if that directory already exists, everything
is hunky-dory: selinux bans kdm from deleting it, and consequently,
it still exists such that kdm doesn't try to create it.

l.

-- 
--
Truth, honesty and respect are rare commodities that all spring from
the same well: Love.  If you love yourself and everyone and everything
around you, funnily and coincidentally enough, life gets a lot better.
--
<a href="http://lkcl.net">      lkcl.net      </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.