[DSE-Dev] Bug#683756: selinux in permissive mode breaks gdm and X

Ron Murray rjmx at rjmx.net
Fri Aug 3 02:10:55 UTC 2012


Package: selinux-policy-default
Version: 2:2.20110726-9
Severity: normal

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Since the last selinux update (around July 6), running selinux in
permissive mode stops gdm3 and X from working for me (haven't tried
enforced mode).

Bootup proceeds normally until X starts up, then all I get is a black
screen with the rotating DIN plug (or whatever it is). GDM never
presents me with a logon screen.

I've tried switching to slim, which does give me a logon screen, but
all session types that I've tried fail: I just get a blank screen with
the big black X.

This happens on three different machines: two desktops (both with
nVidia graphics, using the proprietary module) and a laptop (ATI
graphics, using ATI's proprietary module).

I'm surprised this happens, since I was under the impression that
permissive mode didn't enforce anything. I've had no trouble with it
in the past.

I've been running with selinux disabled on all three boxes since this
problem surfaced.

- -- System Information:
Debian Release: wheezy/sid
  APT prefers testing
  APT policy: (500, 'testing'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.5.0-khufu-0 (SMP w/2 CPU cores; PREEMPT)
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Shell: /bin/sh linked to /bin/dash

Versions of packages selinux-policy-default depends on:
ii  libpam-modules   1.1.3-7.1
ii  libselinux1      2.1.9-5
ii  libsepol1        2.1.4-3
ii  policycoreutils  2.1.10-9
ii  python           2.7.3~rc2-1

Versions of packages selinux-policy-default recommends:
ii  checkpolicy  2.1.8-2
ii  setools      3.3.7-3

Versions of packages selinux-policy-default suggests:
ii  logcheck        1.3.15
pn  syslog-summary  <none>

- -- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local
(empty file)

- -- no debconf information

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=fwQv
-----END PGP SIGNATURE-----



More information about the SELinux-devel mailing list