RHEL7 GDM broken with SELinux + noexec /var/tmp

Trevor Vaughan tvaughan at onyxpoint.com
Wed Oct 8 13:40:05 UTC 2014


It's internal. I'll let you know if it pops up into a public BZ.

Nice to have confirmation though.

Thanks,

Trevor

On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR USARMY CERDEC (US)
<nicholas.p.crawford.ctr at mail.mil> wrote:

>  Confirmed.
>
> Ran in to the same issue, haven't had a chance to go back and investigate
> why.
>
> Do you have a link to the bug report so I can subscribe?
>
> -Nick
> --
> Nicholas P. Crawford
> Senior UNIX Systems Administrator
> Contractor, General Dynamics Information Technology
> NVESD Network Services Branch, US Army
> email: Nicholas.Crawford at gdit.com
> work: 703.704.2299 dsn: 312.654.2299
> fax: 703.704.1612 cell: 571.225.1283
> =Sent from BlackBerry=
>
>  *From*: Trevor Vaughan [mailto:tvaughan at onyxpoint.com]
> *Sent*: Wednesday, October 08, 2014 09:26 AM
> *To*: SCAP Security Guide <scap-security-guide at lists.fedorahosted.org>
> *Subject*: RHEL7 GDM broken with SELinux + noexec /var/tmp
>
>  FYI, as of right now, if you add noexec to /var/tmp *and* enable SELinux
> in enforcing mode, GDM will not start.
>
>  Wanted you all to know to prevent head+desk issues.
>
> Bugs have been filed, news at 11.
>
> Trevor
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com
>
> -- This account not approved for unencrypted proprietary information --
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>



-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan at onyxpoint.com

-- This account not approved for unencrypted proprietary information --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/20aeb456/attachment.html>


More information about the scap-security-guide mailing list