From: Russell Coker <russell@coker.com.au>
To: selinux-refpolicy@vger.kernel.org, Chris PeBenito <pebenito@ieee.org>
Subject: Re: [PATCH] new sddm pam patch
Date: Sun, 27 Mar 2022 22:42:50 +1100 [thread overview]
Message-ID: <3136581.m74T952WcD@xev> (raw)
In-Reply-To: <da3ba04d-9e76-677a-b1b2-2b65f9dc3892@ieee.org>
On Friday, 18 February 2022 00:48:44 AEDT Chris PeBenito wrote:
> > +# for sddm to use pam for greeter, sddm greeter needs execmod
> > +allow xdm_t xdm_tmpfs_t:file execmod;
> > +
> > # Run Xorg.wrap
> > can_exec(xserver_t, xserver_exec_t)
> >
> > Index: refpolicy-2.20220217/config/appconfig-mcs/seusers
> > ===================================================================
> > --- refpolicy-2.20220217.orig/config/appconfig-mcs/seusers
> > +++ refpolicy-2.20220217/config/appconfig-mcs/seusers
> > @@ -1,2 +1,3 @@
> > root:unconfined_u:s0-mcs_systemhigh
> > __default__:unconfined_u:s0-mcs_systemhigh
> > +sddm:xdm:s0
>
> Did sddm:system_u fail?
Yes, there's several programs that end up in the wrong domains (or try to) if
you do that.
> If we must have a new seuser, please place it in
> the xserver module. The build system supports declaring users in modules.
OK, that's in the next version.
> The changes for seusers changes for standard and mls are missing.
OK, done that too.
--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/
next prev parent reply other threads:[~2022-03-27 11:43 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2022-02-17 6:53 [PATCH] new sddm pam patch Russell Coker
2022-02-17 13:48 ` Chris PeBenito
2022-03-27 11:42 ` Russell Coker [this message]
-- strict thread matches above, loose matches on Subject: below --
2022-04-25 16:57 Dominick Grift
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=3136581.m74T952WcD@xev \
--to=russell@coker.com.au \
--cc=pebenito@ieee.org \
--cc=selinux-refpolicy@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).