Re: newrole assertion - should be gnome-terminal assertion

[Ted X Toth <txtoth@gmail.com>]

Stephen Smalley wrote:
> On Tue, 2008-07-08 at 14:02 -0500, Xavier Toth wrote:
>   
>> Using MLS enforcing in a gnome-terminal with context
>> user_u:user_r:user_t:s0-s15:c0.c1023 I run newrole and get these
>> results
>>
>> newrole -l s1-s1 -- -c "gnome-terminal --disable-factory"
>> Password:
>> **
>> ** ERROR:(terminal.c:1016):new_terminal_with_options: assertion
>> failed: (profile)
>>
>>
>> I think Joe straced this and has a little more info if he'd like to chime in.
>>     
>
> So, I assume that this does not happen if in permissive mode?
> What AVC denials occur?  Run semodule -DB and retry if there are no AVCs
> by default.
>
> What is the application trying to do at that point (look at the source
> code and/or ask on the gnome lists)?  What are the possible failure
> conditions there?  What external dependencies does it have?  
>
> strace output might help if you have it.
>
>   
Sorry to have bothered you. Looks like it has something to do with 
polyinstantiation of ~/.gnome or ~/.gnome2. We haven't seen this with 
previous versions even when polyinstantiating :(


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.