RHEL7 GDM broken with SELinux + noexec /var/tmp
Shawn Wells
shawn at redhat.com
Wed Oct 8 20:34:25 UTC 2014
Hah, thanks. Will track internally to RHT.
On 10/8/14, 10:56 AM, Trevor Vaughan wrote:
> Or not.
>
> On Wed, Oct 8, 2014 at 10:56 AM, Trevor Vaughan
> <tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>> wrote:
>
> Hey Shawn,
>
> *Internal* Case number is 01240776.
>
> There's no public BZ that I know of yet, thus the private message.
>
> Trevor
>
> On Wed, Oct 8, 2014 at 10:49 AM, Shawn Wells <shawn at redhat.com
> <mailto:shawn at redhat.com>> wrote:
>
> What's the RHT BZ number?
>
> --
> Shawn Wells
> Director, Innovation Programs
> shawn at redhat.com <mailto:shawn at redhat.com> | 443.534.0130
> <tel:443.534.0130>
> @shawndwells
>
> On Oct 8, 2014, at 9:40 AM, Trevor Vaughan
> <tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>> wrote:
>
>> It's internal. I'll let you know if it pops up into a public BZ.
>>
>> Nice to have confirmation though.
>>
>> Thanks,
>>
>> Trevor
>>
>> On Wed, Oct 8, 2014 at 9:35 AM, Crawford, Nicholas P CTR
>> USARMY CERDEC (US) <nicholas.p.crawford.ctr at mail.mil
>> <mailto:nicholas.p.crawford.ctr at mail.mil>> wrote:
>>
>> Confirmed.
>>
>> Ran in to the same issue, haven't had a chance to go back
>> and investigate why.
>>
>> Do you have a link to the bug report so I can subscribe?
>>
>> -Nick
>> --
>> Nicholas P. Crawford
>> Senior UNIX Systems Administrator
>> Contractor, General Dynamics Information Technology
>> NVESD Network Services Branch, US Army
>> email: Nicholas.Crawford at gdit.com
>> <mailto:Nicholas.Crawford at gdit.com>
>> work: 703.704.2299 <tel:703.704.2299> dsn: 312.654.2299
>> <tel:312.654.2299>
>> fax: 703.704.1612 <tel:703.704.1612> cell: 571.225.1283
>> <tel:571.225.1283>
>> =Sent from BlackBerry=
>>
>> *From*: Trevor Vaughan [mailto:tvaughan at onyxpoint.com
>> <mailto:tvaughan at onyxpoint.com>]
>> *Sent*: Wednesday, October 08, 2014 09:26 AM
>> *To*: SCAP Security Guide
>> <scap-security-guide at lists.fedorahosted.org
>> <mailto:scap-security-guide at lists.fedorahosted.org>>
>> *Subject*: RHEL7 GDM broken with SELinux + noexec /var/tmp
>>
>> FYI, as of right now, if you add noexec to /var/tmp *and*
>> enable SELinux in enforcing mode, GDM will not start.
>>
>> Wanted you all to know to prevent head+desk issues.
>>
>> Bugs have been filed, news at 11.
>>
>> Trevor
>>
>> --
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699 <tel:%28410%29%20541-6699>
>> tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>>
>> -- This account not approved for unencrypted proprietary
>> information --
>>
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> <mailto:scap-security-guide at lists.fedorahosted.org>
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>>
>>
>>
>>
>> --
>> Trevor Vaughan
>> Vice President, Onyx Point, Inc
>> (410) 541-6699 <tel:%28410%29%20541-6699>
>> tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>>
>> -- This account not approved for unencrypted proprietary
>> information --
>> --
>> SCAP Security Guide mailing list
>> scap-security-guide at lists.fedorahosted.org
>> <mailto:scap-security-guide at lists.fedorahosted.org>
>> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
>> https://github.com/OpenSCAP/scap-security-guide/
>
> --
> SCAP Security Guide mailing list
> scap-security-guide at lists.fedorahosted.org
> <mailto:scap-security-guide at lists.fedorahosted.org>
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide
> https://github.com/OpenSCAP/scap-security-guide/
>
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699 <tel:%28410%29%20541-6699>
> tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>
> -- This account not approved for unencrypted proprietary
> information --
>
>
>
>
> --
> Trevor Vaughan
> Vice President, Onyx Point, Inc
> (410) 541-6699
> tvaughan at onyxpoint.com <mailto:tvaughan at onyxpoint.com>
>
> -- This account not approved for unencrypted proprietary information --
>
>
--
Shawn Wells
Director, Innovation Programs
shawn at redhat.com | 443.534.0130
@shawndwells
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fedorahosted.org/pipermail/scap-security-guide/attachments/20141008/2b095342/attachment-0001.html>
More information about the scap-security-guide
mailing list