Tim wrote:
>Subject: Re: GDM problems: gdm-binary
>
>On Wed, 2007-12-19 at 09:04 -0800, Daniel B. Thurman wrote:
>> Seems that something somehow broke when I had moved/copied
>> my /usr/share directory to another partition. I did do both a
>> restorecon and a relabel (/.autorelabel) but this does not seem
>> to resolve my gdm-binary issue.
>
>During the relabelling, was the new /usr/share contents actually
>mounted on the directory tree as /usr/share? The relabelling labels
>things according to expected locations.
Yes, that is correct. The /dev/sdb1 (/share) is mounted to /usr/share
>
>> As it is, I am able to boot and get my gdm login screen but the
>> nagging problem is that on boot up, the gdm screen prior to
>> gdm greeter (login screen) fails to come up displaying the
>> various services being loaded and quickly shows the gdm
>> greeter.
>
>The display of services being loaded is not GDM. If it's graphical,
>it's RHGB that's doing that.
>
Yes, RHGB normally shows two graphical screens: the first showing
the services loading "progress bar", and the second showing the graphical
login screen. What is missing is the first screen.
What I saw in text was
1. The normal linux textscreen data
2. udev
3. A black screen with quick X11 standard cursor then it disappeared
4. Then switch back into text mode showing (among other things), the
last 4 lines showing:
a. Remounting / rw
b. Mounting local filesystems
c. Doing local filesystem quotas
d. Enabling /etc/fstab swap
<less than a minute of waiting...>
(Maybe services are being loaded during this waiting period
5. the graphical login screen pops up.
>I don't know what you mean fails to show the services and QUICKLY shows
>the GDM greeter. No services are being run? GDM appears late in the
>game, after all the services. I can't imagine it appearing quickly
>unless you had very services being started up.
That was the perception that I got, that since the first services progress
screen did not appear, it actually appeared that there was a wating period
of less than a minute after the swap drive was mounted which very well could
be the services. Right after that the login screen appeared "quickly ".
>
>> Looking and grepping for GDM in the /var/log/messages file
>> reveals:
>>
>> Dec 19 07:42:59 linux setroubleshoot: #012 SELinux is
>preventing gdm-binary (xdm_t) "signal" to <Unknown>
>(mono_t).#012 For complete SELinux messages. run sealert
>-l 966ed3a0-cb89-41cc-8eff-7168d263b538
>> Dec 19 07:47:17 linux gdm-binary[2998]: (null): cannot open
>shared object file: No such file or directory
>
>Did you follow the logged instructions and run the command line:
>
>sealert -l 966ed3a0-cb89-41cc-8eff-7168d263b538
Running: sealert -l 966ed3a0-cb89-41cc-8eff-7168d263b538
======================================================
Summary
SELinux is preventing gdm-binary (xdm_t) "signal" to <Unknown> (mono_t).
Detailed Description
SELinux denied access requested by gdm-binary. It is not expected that this
access is required by gdm-binary and this access may signal an intrusion
attempt. It is also possible that the specific version or configuration of
the application is causing it to require additional access.
Allowing Access
You can generate a local policy module to allow this access - see
http://fedora.redhat.com/docs/selinux-faq-fc5/#id2961385 Or you can disable
SELinux protection altogether. Disabling SELinux protection is not
recommended. Please file a http://bugzilla.redhat.com/bugzilla/enter_bug.cgi
against this package.
Additional Information
Source Context system_u:system_r:xdm_t:s0-s0:c0.c1023
Target Context system_u:system_r:mono_t:s0-s0:c0.c1023
Target Objects None [ process ]
Affected RPM Packages
Policy RPM selinux-policy-3.0.8-64.fc8
Selinux Enabled True
Policy Type targeted
MLS Enabled True
Enforcing Mode Enforcing
Plugin Name plugins.catchall
Host Name linux.cdkkt.com
Platform Linux linux.cdkkt.com 2.6.23.8-63.fc8 #1 SMP Wed
Nov 21 18:51:08 EST 2007 i686 i686
Alert Count 2
First Seen Wed Dec 19 07:42:32 2007
Last Seen Wed Dec 19 07:42:48 2007
Local ID 966ed3a0-cb89-41cc-8eff-7168d263b538
Line Numbers
Raw Audit Messages
avc: denied { signal } for comm=gdm-binary pid=3060
scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
tcontext=system_u:system_r:mono_t:s0-s0:c0.c1023
======================================================
It seems that the problem occured when the first screen failed
to come up and the X11 cursor, instead of the normal blue spinner
cursor. Not sure what I can do to 'capture' that step to investigate
this issue further.
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.503 / Virus Database: 269.17.4/1189 - Release Date: 12/18/2007 9:40 PM
