All of lore.kernel.org
 help / color / mirror / Atom feed
* kdm 3.3 is deleting and recreating /var/run/xdmctl
@ 2004-08-15 18:40 Luke Kenneth Casson Leighton
  0 siblings, 0 replies; only message in thread
From: Luke Kenneth Casson Leighton @ 2004-08-15 18:40 UTC (permalink / raw)
  To: SE-Linux

heads up for something to watch out for: kdm 3.3 is deleting and
then recreating /var/run/xdmctl, presumably as a way of clearing
out any messy sockets in that directory.

kdm 3.2.2 did not behave in this manner.

it means that people doing a new install of kdm under selinux
may run into problems.

e.g. if dpkg has not been given write permission to /var/run
in order for /var/run/xdmctl to be created at postinst time.

e.g. if postinst does _not_ create this directory, it doesn't exist,
and kdm attempts to create it for the first time.

i am not allowing the xdm_t permission to unlink and create in
var_run_t: consequently, if that directory already exists, everything
is hunky-dory: selinux bans kdm from deleting it, and consequently,
it still exists such that kdm doesn't try to create it.

l.

-- 
--
Truth, honesty and respect are rare commodities that all spring from
the same well: Love.  If you love yourself and everyone and everything
around you, funnily and coincidentally enough, life gets a lot better.
--
<a href="http://lkcl.net">      lkcl.net      </a> <br />
<a href="mailto:lkcl@lkcl.net"> lkcl@lkcl.net </a> <br />


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

^ permalink raw reply	[flat|nested] only message in thread

only message in thread, other threads:[~2004-08-15 18:29 UTC | newest]

Thread overview: (only message) (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-08-15 18:40 kdm 3.3 is deleting and recreating /var/run/xdmctl Luke Kenneth Casson Leighton

This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.