RHEL7 GDM broken with SELinux + noexec /var/tmp

Shawn Wells shawn at redhat.com
Wed Oct 8 14:49:34 UTC 2014


What's the RHT BZ number?

--
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells

> On Oct 8, 2014, at 9:40 AM, Trevor Vaughan <tvaughan at onyxpoint.com> wrote:
> 
> It's internal. I'll let you know if it pops up into a public BZ.
> 
> Nice to have confirmation though.
> 
> Thanks,
> 
> Trevor
> 
>> On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR USARMY CERDEC (US) <nicholas.p.crawford.ctr at mail.mil> wrote:
>> Confirmed.
>> 
>> Ran in to the same issue, haven't had a chance to go back and investigate why.
>> 
>> Do you have a link to the bug report so I can subscribe?
>> 
>> -Nick 
>> -- 
>> Nicholas P. Crawford 
>> Senior UNIX Systems Administrator 
>> Contractor, General Dynamics Information Technology 
>> NVESD Network Services Branch, US Army 
>> email: Nicholas.Crawford at gdit.com 
>> work: 703.704.2299 dsn: 312.654.2299 
>> fax: 703.704.1612 cell: 571.225.1283 
>> =Sent from BlackBerry=
>>  
>> From: Trevor Vaughan [mailto:tvaughan at onyxpoint.com] 
>> Sent: Wednesday, October 08, 2014 09:26 AM
>> To: SCAP Security Guide <scap-security-guide at lists.fedorahosted.org> 
>> Subject: RHEL7 GDM broken with SELinux + noexec /var/tmp 
>>  
>> FYI, as of right now, if you add noexec to /var/tmp *and* enable SELinux in enforcing mode, GDM will not start.
>> 
>> Wanted you all to know to prevent head+desk issues.
>> 
>> Bugs have been filed, news at 11.
>> 
>> Trevor
>> 
>> -- 
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699
>> tvaughan at onyxpoint.com
>> 
>> -- This account not approved for unencrypted proprietary information --
>> 
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
> 
> 
> 
> -- 
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com
> 
> -- This account not approved for unencrypted proprietary information --
> -- 
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/d84515f4/attachment.html>


More information about the scap-security-guide mailing list