[DSE-Dev] Bug#719743: selinux-policy-default: GDM3 doesn't load in permissive mode

[Kees de Jong]

Package: selinux-policy-default
Version: 2:2.20110726-12
Severity: important

Hi,

I followed all these steps: https://wiki.debian.org/SELinux/Setup
But GDM3 doesn't automatically start anymore after the `selinux-activate`, labeling and reboot. I've checked the PAM modules:
gdm3-autologin:session
gdm3:session
gdm-welcome:session
login:session
sshd:session

This has been added automatically to those pam modules: session required pam_selinux.so multiple

Which should be enough. But still GDM3 doesn't start by itself, running `service gdm3 restart` does bring up the manager. But since I'm running in permissive with PAM configured it should work right? What could be the problem? Am I missing something or is GDM3/default-policy to blame?

Thanks



-- System Information:
Debian Release: 7.1
  APT prefers stable
  APT policy: (990, 'stable'), (500, 'stable-updates')
Architecture: amd64 (x86_64)

Kernel: Linux 3.9-0.bpo.1-amd64 (SMP w/8 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8) (ignored: LC_ALL set to en_US.UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages selinux-policy-default depends on:
ii  libpam-modules   1.1.3-7.1
ii  libselinux1      2.1.9-5
ii  libsepol1        2.1.4-3
ii  policycoreutils  2.1.10-9
ii  python           2.7.3-4

Versions of packages selinux-policy-default recommends:
ii  checkpolicy  2.1.8-2
ii  setools      3.3.7-3

Versions of packages selinux-policy-default suggests:
pn  logcheck        <none>
pn  syslog-summary  <none>

-- Configuration Files:
/etc/selinux/default/modules/active/file_contexts.local [Errno 13] Permission denied: u'/etc/selinux/default/modules/active/file_contexts.local'

-- no debconf information