https://bugzilla.suse.com/show_bug.cgi?id=1223145 Bug ID: 1223145 Summary: [SELinux] AVC denial on tw + gnome startup relating to xdm_t Classification: openSUSE Product: openSUSE Tumbleweed Version: Current Hardware: Other OS: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security Assignee: security-team@suse.de Reporter: cathy.hu@suse.com QA Contact: security-team@suse.de Target Milestone: --- Found By: --- Blocker: --- Operating System: tumbleweed with gnome desktop SELinux policy version and repository: the one currently in security:SELinux containing the /var/run change (commit in factory branch: 7eb64de2191880e9d2207fa60c9605268d6fc8ce) The software (incl. version) that is affected by the SELinux issue and the error message: gnome 46 + wayland SELinux Audit log: ---- time->Fri Apr 19 13:58:55 2024 type=AVC msg=audit(1713527935.206:83): avc: denied { getattr } for pid=1019 comm="startproc" path=2F7573722F7362696E2F706C796D6F75746864202864656C6574656429 dev="rootfs" ino=2256 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:root_t:s0 tclass=file permissive=0 Any other important details: install tumbleweed with gnome desktop over regular installer enable selinux, add security:SELinux repo, install selinux-policy + selinux-policy targeted from repo, reboot, AVC happens on every boot low prio, does not break functionality on a quick look -- You are receiving this mail because: You are on the CC list for the bug.