Re: Permissive mode for xace is broken.

[Eamon Walsh <ewalsh@tycho.nsa.gov>]

[-- Attachment #1: Type: text/plain, Size: 778 bytes --]

Eamon Walsh wrote:
> The X object manager logs all avc's and status messages (including the 
> AVC netlink stuff) through the audit system using libaudit calls 
> (audit_log_user_avc_message, etc.)   I disavow all responsibility for 
> the messages once they enter libaudit

It's being black-holed in rawhide.  To see for yourself, add the 
attached patch to the spec file and rebuild the xserver from SRPM.  It 
will tee the avc messages into /var/log/Xorg.0.log.

Also, pull libselinux from upstream.  The BadWindow error may be fixed.

You'll have to report to me what you see in the X server output.  I'm 
seeing tons of avc's: it doesn't appear as though staff_t is even 
getting X permissions allowed.





-- 
Eamon Walsh <ewalsh@tycho.nsa.gov>
National Security Agency


[-- Warning: decoded text below may be mangled, UTF-8 assumed --]
[-- Attachment #2: xserver-1.4.99-xselinux-debug.patch --]
[-- Type: text/x-patch; name="xserver-1.4.99-xselinux-debug.patch", Size: 0 bytes --]