RHEL7 GDM broken with SELinux + noexec /var/tmp

Shawn Wells shawn at redhat.com
Wed Oct 8 20:34:25 UTC 2014


Hah, thanks. Will track internally to RHT.



On 10/8/14, 10:56 AM, Trevor Vaughan wrote:
> Or not.
>
> On Wed, Oct 8, 2014 at 10:56 AM, Trevor Vaughan
> <tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>> wrote:
>
>     Hey Shawn,
>
>     *Internal* Case number is 01240776.
>
>     There's no public BZ that I know of yet, thus the private message.
>
>     Trevor
>
>     On Wed, Oct 8, 2014 at 10:49 AM, Shawn Wells <shawn at redhat.com
>     <mailto:shawn at redhat.com>> wrote:
>
>         What's the RHT BZ number?
>
>         -- 
>         Shawn Wells
>         Director, Innovation Programs
>         shawn at redhat.com <mailto:shawn at redhat.com> | 443.534.0130
>         <tel:443.534.0130>
>         @shawndwells
>
>         On Oct 8, 2014, at 9:40 AM, Trevor Vaughan
>         <tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>> wrote:
>
>>         It's internal. I'll let you know if it pops up into a public BZ.
>>
>>         Nice to have confirmation though.
>>
>>         Thanks,
>>
>>         Trevor
>>
>>         On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR
>>         USARMY CERDEC (US) <nicholas.p.crawford.ctr at mail.mil
>>         <mailto:nicholas.p.crawford.ctr at mail.mil>> wrote:
>>
>>             Confirmed.
>>
>>             Ran in to the same issue, haven't had a chance to go back
>>             and investigate why.
>>
>>             Do you have a link to the bug report so I can subscribe?
>>
>>             -Nick
>>             -- 
>>             Nicholas P. Crawford
>>             Senior UNIX Systems Administrator
>>             Contractor, General Dynamics Information Technology
>>             NVESD Network Services Branch, US Army
>>             email: Nicholas.Crawford at gdit.com
>>             <mailto:Nicholas.Crawford at gdit.com>
>>             work: 703.704.2299 <tel:703.704.2299> dsn: 312.654.2299
>>             <tel:312.654.2299>
>>             fax: 703.704.1612 <tel:703.704.1612> cell: 571.225.1283
>>             <tel:571.225.1283>
>>             =Sent from BlackBerry=
>>              
>>             *From*: Trevor Vaughan [mailto:tvaughan at onyxpoint.com
>>             <mailto:tvaughan at onyxpoint.com>]
>>             *Sent*: Wednesday, October 08, 2014 09:26 AM
>>             *To*: SCAP Security Guide
>>             <scap-security-guide at lists.fedorahosted.org
>>             <mailto:scap-security-guide at lists.fedorahosted.org>>
>>             *Subject*: RHEL7 GDM broken with SELinux + noexec /var/tmp
>>              
>>             FYI, as of right now, if you add noexec to /var/tmp *and*
>>             enable SELinux in enforcing mode, GDM will not start.
>>
>>             Wanted you all to know to prevent head+desk issues.
>>
>>             Bugs have been filed, news at 11.
>>
>>             Trevor
>>
>>             -- 
>>             Trevor Vaughan
>>             Vice President, Onyx Point, Inc
>>             (410) 541-6699 <tel:%28410%29%20541-6699>
>>             tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>>
>>             -- This account not approved for unencrypted proprietary
>>             information --
>>
>>             --
>>             SCAP Security Guide mailing list
>>             scap-security-guide at lists.fedorahosted.org
>>             <mailto:scap-security-guide at lists.fedorahosted.org>
>>             https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>             https://github.com/OpenSCAP/scap-security-guide/
>>
>>
>>
>>
>>         -- 
>>         Trevor Vaughan
>>         Vice President, Onyx Point, Inc
>>         (410) 541-6699 <tel:%28410%29%20541-6699>
>>         tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>>
>>         -- This account not approved for unencrypted proprietary
>>         information --
>>         -- 
>>         SCAP Security Guide mailing list
>>         scap-security-guide at lists.fedorahosted.org
>>         <mailto:scap-security-guide at lists.fedorahosted.org>
>>         https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>>         https://github.com/OpenSCAP/scap-security-guide/
>
>         --
>         SCAP Security Guide mailing list
>         scap-security-guide at lists.fedorahosted.org
>         <mailto:scap-security-guide at lists.fedorahosted.org>
>         https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>         https://github.com/OpenSCAP/scap-security-guide/
>
>
>
>
>     -- 
>     Trevor Vaughan
>     Vice President, Onyx Point, Inc
>     (410) 541-6699 <tel:%28410%29%20541-6699>
>     tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>
>     -- This account not approved for unencrypted proprietary
>     information --
>
>
>
>
> -- 
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>
> -- This account not approved for unencrypted proprietary information --
>
>


-- 
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/2b095342/attachment-0001.html>


More information about the scap-security-guide mailing list