Andrej Podzimek wrote:
This is utterly frustrating. :-( I'd like to understand
what's wrong here.
Does anyone have a working sddm that logs users into KDE 5 with SELinux
enabled on Fedora 23? If so, what log messages does it produce?
Yes.
audit logs?
Dec 21 11:13:54 localhost audit: USER_AUTH pid=2271 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:authentication grantors=pam_unix,pam_kwallet5,pam_kwallet
acct="rdieter1" exe="/usr/libexec/sddm-helper" hostname=? addr=?
terminal=?
res=success'
Dec 21 11:13:54 localhost audit: USER_ACCT pid=2271 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:accounting grantors=pam_unix,pam_localuser acct="rdieter1"
exe="/usr/libexec/sddm-helper" hostname=? addr=? terminal=? res=success'
Dec 21 11:13:54 localhost audit: CRED_ACQ pid=2271 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023
msg='op=PAM:setcred grantors=pam_unix,pam_kwallet5,pam_kwallet
acct="rdieter1" exe="/usr/libexec/sddm-helper" hostname=? addr=?
terminal=?
res=success'
Dec 21 11:13:54 localhost audit: USER_ROLE_CHANGE pid=2271 uid=0 auid=1000
ses=3 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-
context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 selected-
context=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023
exe="/usr/libexec/sddm-helper" hostname=? addr=? terminal=:0 res=success'
Dec 21 11:13:54 localhost audit: USER_AVC pid=1 uid=0 auid=4294967295
ses=4294967295 subj=system_u:system_r:init_t:s0 msg='Unknown permission
start for class system exe="/usr/lib/systemd/systemd" sauid=0 hostname=?
addr=? terminal=?'
Dec 21 11:13:54 localhost systemd-logind: New session 3 of user rdieter1.
Dec 21 11:13:54 localhost systemd: Started Session 3 of user rdieter1.
Dec 21 11:13:54 localhost systemd: Starting Session 3 of user rdieter1.
Dec 21 11:13:55 localhost audit: USER_START pid=2271 uid=0 auid=1000 ses=3
subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open
grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_kwallet5,pam_kwallet,pam_lastlog
acct="rdieter1" exe="/usr/libexec/sddm-helper" hostname=? addr=?
terminal=:0
res=success'