[X2Go-Dev] Bug#438: Bug#438: x2goserver and rhel6.4 / selinux Problem

[Orion Poplawski]

On 03/04/2014 04:02 AM, Frank Knoben wrote:
> When I put the lines in the x2gostartagent script
>
> after the
>
> XAUTHORITY=${XAUTHORITY:-"$HOME/.Xauthority"}
>
> line, the permissions will be fixed on login and not on logout.
> Unfortunately, restorcon sets the permissions to system_u:object_r:default_t:s0
> and this does not work on my system.

That's not right.  What is your home directory?  What does matchpathcon $HOME 
return?

> Instead of fixing the selinux .Xauthority permissions, the file could also be
> deleted on login,
> if it existed. Something like:
>
>
> if test -f $HOME/.Xauthority
> then
>    rm $HOME/.Xauthority
> fi
>
> But it could also be, that my selinux system is misconfigured in some strange
> way,
> so that other people, who run the system, don't have this problem.
>
>
> Frank
>
>
> On 03/01/2014 12:07 AM, Orion Poplawski wrote:
>> On 02/28/2014 05:15 AM, Frank Knoben wrote:
>>> Hi Mike,
>>>
>>> what about the following solution / proposal for the x2goruncommand script:
>>>
>>>
>>> ....
>>> # run logout scripts
>>>
>>> FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t`
>>> if test -n $FIX_AUTH
>>> then
>>>    /usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0 $HOME/.Xauthority
>>> fi
>>>
>>
>> I would suggest using restorecon to set the label.
>>
>>


-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA, Boulder/CoRA Office             FAX: 303-415-9702
3380 Mitchell Lane                       orion at nwra.com
Boulder, CO 80301                   http://www.nwra.com