RHEL7 GDM broken with SELinux + noexec /var/tmp
Shawn Wells
shawn at redhat.com
Wed Oct 8 14:49:34 UTC 2014
What's the RHT BZ number?
--
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells
> On Oct 8, 2014, at 9:40 AM, Trevor Vaughan <tvaughan at onyxpoint.com> wrote:
>
> It's internal. I'll let you know if it pops up into a public BZ.
>
> Nice to have confirmation though.
>
> Thanks,
>
> Trevor
>
>> On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR USARMY CERDEC (US) <nicholas.p.crawford.ctr at mail.mil> wrote:
>> Confirmed.
>>
>> Ran in to the same issue, haven't had a chance to go back and investigate why.
>>
>> Do you have a link to the bug report so I can subscribe?
>>
>> -Nick
>> --
>> Nicholas P. Crawford
>> Senior UNIX Systems Administrator
>> Contractor, General Dynamics Information Technology
>> NVESD Network Services Branch, US Army
>> email: Nicholas.Crawford at gdit.com
>> work: 703.704.2299 dsn: 312.654.2299
>> fax: 703.704.1612 cell: 571.225.1283
>> =Sent from BlackBerry=
>>
>> From: Trevor Vaughan [mailto:tvaughan at onyxpoint.com]
>> Sent: Wednesday, October 08, 2014 09:26 AM
>> To: SCAP Security Guide <scap-security-guide at lists.fedorahosted.org>
>> Subject: RHEL7 GDM broken with SELinux + noexec /var/tmp
>>
>> FYI, as of right now, if you add noexec to /var/tmp *and* enable SELinux in enforcing mode, GDM will not start.
>>
>> Wanted you all to know to prevent head+desk issues.
>>
>> Bugs have been filed, news at 11.
>>
>> Trevor
>>
>> --
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699
>> tvaughan at onyxpoint.com
>>
>> -- This account not approved for unencrypted proprietary information --
>>
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com
>
> -- This account not approved for unencrypted proprietary information --
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/d84515f4/attachment.html>
More information about the scap-security-guide
mailing list