[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#415481: marked as done (Login fails with selinux)

Your message dated Wed, 21 Mar 2007 17:36:56 +0000
with message-id <46016D38.4030505@martinorr.name>
and subject line Bug#415481: Not a bug in kdm
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)
--- Begin Message --- 
Package: kdm
Version: 4:3.5.6.dfsg.1-2
Severity: normal

--- Please enter the report below this line. ---

When I log in to kdm, I get thrown straight back to the kdm greeter without
any error messages.

I have selinux on this box, in permissive mode.  If I boot with selinux
disabled or with pam_selinux.so commented out in /etc/pam.d/common-session,
then I can log in fine.

Log in works fine with kdm and kdebase-bin 4:3.5.6.dfsg.1-1, even with
selinux enabled.



--- System information. ---
Architecture: amd64
Kernel:       Linux 2.6.20

Debian Release: 4.0
  990 unstable        www.mirrorservice.org
  990 unstable        www.debian-multimedia.org
  990 unstable        ftp.ie.debian.org
  990 unstable        ftp.heanet.ie
  990 unstable        ftp-uxsup.csx.cam.ac.uk
    1 experimental    ftp.ie.debian.org
    1 experimental    ftp-uxsup.csx.cam.ac.uk

--- Package information. ---
Depends                                  (Version) | Installed
==================================================-+-=========================
kdelibs4c2a                         (>= 4:3.5.6-1) | 4:3.5.6.r1.dfsg.1-2
libc6                                 (>= 2.3.5-1) | 2.5-0exp6
libgcc1                            (>= 1:4.1.1-12) | 1:4.2-20070307-1
libpam0g                                 (>= 0.76) | 0.79-4
libqt3-mt                             (>= 3:3.3.7) | 3:3.3.7-3
libstdc++6                           (>= 4.1.1-12) | 4.2-20070307-1
libx11-6                                           | 2:1.1.1-1
libxau6                                            | 1:1.0.3-1
libxdmcp6                                          | 1:1.0.2-1
libxtst6                                           | 1:1.0.1-5
kdebase-bin                   (= 4:3.5.6.dfsg.1-2) | 4:3.5.6.dfsg.1-2
kdebase-data                   (>> 4:3.5.6.dfsg.1) | 4:3.5.6.dfsg.1-2
kdebase-data                   (<< 4:3.5.6.dfsg.2) | 4:3.5.6.dfsg.1-2
debconf                                (>= 1.2.9)  | 1.5.13
 OR debconf-2.0                                    |
libpam-runtime                        (>= 0.76-14) | 0.79-4
xbase-clients                                      | 1:7.2.ds2-1

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
--- Begin Message --- 
It turned out that I had an old selinux policy installed.  I upgraded that
and kdm works fine - I can log in and the context is set correctly.

The patch in #249784 does a subset of what pam_selinux does.  I have
pam_selinux in /etc/pam.d/common-session, and with that no patch is needed
to kdm (I tested autologin as well as password-based login).  However,
looking around the web I have found that pam_selinux is not recommended for
graphical login managers.  I am not sure why, except that it doesn't work
with gdm (because gdm is organised differently to kdm) so you would need to
ask someone like Russell or Manoj.

All the best,

-- 
Martin Orr

Attachment: signature.asc
Description: OpenPGP digital signature


--- End Message ---
Reply to: