[gentoo-hardened] Re: SELinux and KDE4.6.3

[gentoo-hardened] Re: SELinux and KDE4.6.3

[Dave]

Hi,

it is the dbus not working properly. 

with (SELinux disabled)

/etc/init.d/dbus restart

then 

setenforce=1

these KDE's applications now working fine.


--
Rgds,
Dave



-- 
http://www.fastmail.fm - Choose from over 50 domains or use your own

Re: [gentoo-hardened] Re: SELinux and KDE4.6.3

[Sven Vermeulen]

[-- Attachment #1: Type: text/plain, Size: 616 bytes --]

On Fri, Jun 24, 2011 at 6:02 PM, Dave <mailintern@123mail.org> wrote:

> it is the dbus not working properly.
>
> with (SELinux disabled)
>
> /etc/init.d/dbus restart
>
> then
>
> setenforce=1
>
> these KDE's applications now working fine.
>

With "SELinux disabled" you mean "SELinux in permissive mode", right?

Could you
- setenforce 0
- /etc/init.d/dbus stop
- setenforce 1
- clear avc.log
- /etc/init.d/dbus start

And then send in your avc.log file? The excerpt you pasted earlier is too
big and spans multiple days, so is probably an amalgamation of different
issues (cosmetic or not).

Wkr,
  Sven Vermeulen

[-- Attachment #2: Type: text/html, Size: 984 bytes --]

[gentoo-hardened] Re: SELinux and KDE4.6.3

[Dave]

On Fri, 24 Jun 2011 21:05:25 +0200
Sven Vermeulen <sven.vermeulen@siphos.be> wrote:

> On Fri, Jun 24, 2011 at 6:02 PM, Dave <mailintern@123mail.org> wrote:
> 
> > it is the dbus not working properly.
> >
> > with (SELinux disabled)
> >
> > /etc/init.d/dbus restart
> >
> > then
> >
> > setenforce=1
> >
> > these KDE's applications now working fine.
> >
> 
> With "SELinux disabled" you mean "SELinux in permissive mode", right?

NO, later I found out that it doesn't matter if SELinux is enabled or
not.

Restarting dbus makes Dolphin, Konqueror and modern KMenu working with
SELinux enabled (targeted)
and a 'hardened/linux/amd64/no-multilib/selinux' Profile.

> Could you
> - setenforce 0
> - /etc/init.d/dbus stop
> - setenforce 1
> - clear avc.log
> - /etc/init.d/dbus start
> 
> And then send in your avc.log file? The excerpt you pasted earlier is
> too big and spans multiple days, so is probably an amalgamation of
> different issues (cosmetic or not).

If've just tried it, but no entries in avc.log since restarting dbus.

--
Rgds,
Dave



-- 
http://www.fastmail.fm - IMAP accessible web-mail