RHEL7 GDM broken with SELinux + noexec /var/tmp

Trevor Vaughan tvaughan at onyxpoint.com
Wed Oct 8 14:56:14 UTC 2014


Or not.

On Wed, Oct 8, 2014 at 10:56 AM, Trevor Vaughan <tvaughan at onyxpoint.com>
wrote:

> Hey Shawn,
>
> *Internal* Case number is 01240776.
>
> There's no public BZ that I know of yet, thus the private message.
>
> Trevor
>
> On Wed, Oct 8, 2014 at 10:49 AM, Shawn Wells <shawn at redhat.com> wrote:
>
>> What's the RHT BZ number?
>>
>> --
>> Shawn Wells
>> Director, Innovation Programs
>> shawn at redhat.com | 443.534.0130
>> @shawndwells
>>
>> On Oct 8, 2014, at 9:40 AM, Trevor Vaughan <tvaughan at onyxpoint.com>
>> wrote:
>>
>> It's internal. I'll let you know if it pops up into a public BZ.
>>
>> Nice to have confirmation though.
>>
>> Thanks,
>>
>> Trevor
>>
>> On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR USARMY CERDEC
>> (US) <nicholas.p.crawford.ctr at mail.mil> wrote:
>>
>>>  Confirmed.
>>>
>>> Ran in to the same issue, haven't had a chance to go back and
>>> investigate why.
>>>
>>> Do you have a link to the bug report so I can subscribe?
>>>
>>> -Nick
>>> --
>>> Nicholas P. Crawford
>>> Senior UNIX Systems Administrator
>>> Contractor, General Dynamics Information Technology
>>> NVESD Network Services Branch, US Army
>>> email: Nicholas.Crawford at gdit.com
>>> work: 703.704.2299 dsn: 312.654.2299
>>> fax: 703.704.1612 cell: 571.225.1283
>>> =Sent from BlackBerry=
>>>
>>>  *From*: Trevor Vaughan [mailto:tvaughan at onyxpoint.com]
>>> *Sent*: Wednesday, October 08, 2014 09:26 AM
>>> *To*: SCAP Security Guide <scap-security-guide at lists.fedorahosted.org>
>>> *Subject*: RHEL7 GDM broken with SELinux + noexec /var/tmp
>>>
>>>  FYI, as of right now, if you add noexec to /var/tmp *and* enable
>>> SELinux in enforcing mode, GDM will not start.
>>>
>>>  Wanted you all to know to prevent head+desk issues.
>>>
>>> Bugs have been filed, news at 11.
>>>
>>> Trevor
>>>
>>> --
>>> Trevor Vaughan
>>> Vice President, Onyx Point, Inc
>>> (410) 541-6699
>>> tvaughan at onyxpoint.com
>>>
>>> -- This account not approved for unencrypted proprietary information --
>>>
>>> --
>>> SCAP Security Guide mailing list
>>> scap-security-guide at lists.fedorahosted.org
>>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>> https://github.com/OpenSCAP/scap-security-guide/
>>>
>>
>>
>>
>> --
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699
>> tvaughan at onyxpoint.com
>>
>> -- This account not approved for unencrypted proprietary information --
>>
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>>
>>
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>>
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com
>
> -- This account not approved for unencrypted proprietary information --
>



-- 
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699
tvaughan at onyxpoint.com

-- This account not approved for unencrypted proprietary information --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/dfaa1e86/attachment.html>


More information about the scap-security-guide mailing list