Bug ID 1223145
Summary [SELinux] AVC denial on tw + gnome startup relating to xdm_t
Classification openSUSE
Product openSUSE Tumbleweed
Version Current
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component Security
Assignee security-team@suse.de
Reporter cathy.hu@suse.com
QA Contact security-team@suse.de
Target Milestone ---
Found By ---
Blocker --- 

Operating System: tumbleweed with gnome desktop

SELinux policy version and repository: the one currently in security:SELinux
containing the /var/run change (commit in factory branch:
7eb64de2191880e9d2207fa60c9605268d6fc8ce)

The software (incl. version) that is affected by the SELinux issue and the
error message: 
gnome 46 + wayland

SELinux Audit log:

----
time->Fri Apr 19 13:58:55 2024
type=AVC msg=audit(1713527935.206:83): avc:  denied  { getattr } for  pid=1019
comm="startproc"
path=2F7573722F7362696E2F706C796D6F75746864202864656C6574656429 dev="rootfs"
ino=2256 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
tcontext=system_u:object_r:root_t:s0 tclass=file permissive=0


Any other important details: 
install tumbleweed with gnome desktop over regular installer
enable selinux, add security:SELinux repo, install selinux-policy +
selinux-policy targeted from repo, reboot, AVC happens on every boot


low prio, does not break functionality on a quick look

You are receiving this mail because: