On Sat, 13 Aug 2011 00:25:26 +0200 Sven Vermeulen <sven.vermeu...@siphos.be> wrote:
Hi, > On Thu, Aug 11, 2011 at 7:25 PM, Udo Siewert <alge...@lavabit.com> > wrote: > > > /usr/bin/kdm system_u:object_r:xdm_exec_t > > /usr/bin/xdm system_u:object_r:xdm_exec_t > > > > When starting KDE by /etc/init.d/xdm 'id -Z' -> > > system_u:system_r:xdm_t > > > > and all KDE processes -> system_u:system_r:xdm_t > > > > Hmm... assuming xdm works through some PAM configuration, can you > tell me how /etc/conf.d/xdm (or kdm, gdm, whatever) looks like? > > If it doesn't source system-auth (which is where we put the > pam_selinux.so call in) that might be the reason... you put me in the right direction: in /etc/pam.d/kde session required pam_selinux.so open session required pam_selinux.so close was missing (don't know if I messed it up during dispatch-conf or if it is missing by default). Thanks for that! Regards, Udo