<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hi Mike,<br>
<br>
the file permissions only need to be fixed for the next login. <br>
During startup, the xauth command needs the selinux file
permissions<br>
of <b> unconfined_u:object_r:xauth_home_t:s0</b> or of <b>unconfined_u:object_r:user_home_t:s0</b>
to the .Xauthority file,<br>
so that it can overwrite the file with the new Xauthority
Information.<br>
After that, everything works fine for the session.<br>
At least for my test, where I did login and opened a terminal
window.<br>
Maybe I should try opening some more kde and gnome applications.<br>
On my system, it is ok, when the permissions will be fixed at
logout time.<br>
<br>
Sincerly<br>
<br>
Frank<br>
<br>
<br>
On 02/28/2014 01:20 PM, Mike Gabriel wrote:<br>
</div>
<blockquote
cite="mid:20140228122051.Horde.GZ8FBPgZh6U4xr_vcWozeg4@mail.das-netzwerkteam.de"
type="cite">Hi Frank,
<br>
<br>
On Fr 28 Feb 2014 13:15:41 CET, Frank Knoben wrote:
<br>
<br>
<blockquote type="cite">Hi Mike,
<br>
<br>
what about the following solution / proposal for the
x2goruncommand script:
<br>
<br>
<br>
....
<br>
# run logout scripts
<br>
<br>
FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t`
<br>
if test -n $FIX_AUTH
<br>
then
<br>
/usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0
$HOME/.Xauthority
<br>
fi
<br>
<br>
<br>
test -r /etc/x2go/x2go_logout && . /etc/x2go/x2go_logout
<br>
<br>
...
<br>
<br>
this fixes the selinux file permission in case, it it set to
system_u:object_r:default_t:s0
<br>
It works on my system.
<br>
<br>
sincerly
<br>
<br>
Frank
<br>
</blockquote>
<br>
The position where you propose adding the fix does not seem right
to me. As the file permissions will stay "wrong" for the duration
of the session and will only be corrected after the session has
ended.
<br>
<br>
Do I understand it correctly, that the file permissions need
adaptions directly after session startup (i.e. after launching the
session (destop) command)?
<br>
<br>
Greets,
<br>
Mike
<br>
<br>
<br>
</blockquote>
<br>
</body>
</html>