Skip to content

Commit

Permalink
allow kdm to create /root/.kde/ with correct label
Browse files Browse the repository at this point in the history
When the kdm service is started, it wants to create the .kde directory
under /root/, but SELinux denies that action. When the /root/.kde
directory exists, the kdm service wants to create a symlink in it,
but SELinux denies that action too. The intended symlink should
point this way:
 * /root/.kde/cache-machine-<FQDN> --> /var/tmp/kdecache-root

SELinux policy should now label the newly created /root/.kde
directory correctly as config_home_t, which is consistent with
other definitions. Allow rule for creating a symlink is already
defined.

Resolves: bz#2275868
  • Loading branch information
milosmalik committed Dec 11, 2024
1 parent 3023aa8 commit 8747081
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions policy/modules/services/xserver.if
Original file line number Diff line number Diff line change
Expand Up @@ -2422,6 +2422,7 @@ interface(`xserver_filetrans_admin_home_content',`

optional_policy(`
gnome_cache_filetrans($1, xdm_home_t, dir, "xdm")
gnome_filetrans_admin_home_content(xdm_t)
')
')

Expand Down

0 comments on commit 8747081

Please sign in to comment.