RHEL7 GDM broken with SELinux + noexec /var/tmp

Trevor Vaughan tvaughan at onyxpoint.com
Wed Oct 8 14:56:03 UTC 2014


Hey Shawn,

*Internal* Case number is 01240776.

There's no public BZ that I know of yet, thus the private message.

Trevor

On Wed, Oct 8, 2014 at 10:49 AM, Shawn Wells <shawn at redhat.com> wrote:

> What's the RHT BZ number?
>
> --
> Shawn Wells
> Director, Innovation Programs
> shawn at redhat.com | 443.534.0130
> @shawndwells
>
> On Oct 8, 2014, at 9:40 AM, Trevor Vaughan <tvaughan at onyxpoint.com> wrote:
>
> It's internal. I'll let you know if it pops up into a public BZ.
>
> Nice to have confirmation though.
>
> Thanks,
>
> Trevor
>
> On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR USARMY CERDEC
> (US) <nicholas.p.crawford.ctr at mail.mil> wrote:
>
>>  Confirmed.
>>
>> Ran in to the same issue, haven't had a chance to go back and investigate
>> why.
>>
>> Do you have a link to the bug report so I can subscribe?
>>
>> -Nick
>> --
>> Nicholas P. Crawford
>> Senior UNIX Systems Administrator
>> Contractor, General Dynamics Information Technology
>> NVESD Network Services Branch, US Army
>> email: Nicholas.Crawford at gdit.com
>> work: 703.704.2299 dsn: 312.654.2299
>> fax: 703.704.1612 cell: 571.225.1283
>> =Sent from BlackBerry=
>>
>>  *From*: Trevor Vaughan [mailto:tvaughan at onyxpoint.com]
>> *Sent*: Wednesday, October 08, 2014 09:26 AM
>> *To*: SCAP Security Guide <scap-security-guide at lists.fedorahosted.org>
>> *Subject*: RHEL7 GDM broken with SELinux + noexec /var/tmp
>>
>>  FYI, as of right now, if you add noexec to /var/tmp *and* enable
>> SELinux in enforcing mode, GDM will not start.
>>
>>  Wanted you all to know to prevent head+desk issues.
>>
>> Bugs have been filed, news at 11.
>>
>> Trevor
>>
>> --
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699
>> tvaughan at onyxpoint.com
>>
>> -- This account not approved for unencrypted proprietary information --
>>
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>>
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com
>
> -- This account not approved for unencrypted proprietary information --
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>



-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan at onyxpoint.com

-- This account not approved for unencrypted proprietary information --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/60c4ee26/attachment-0001.html>


More information about the scap-security-guide mailing list