Re: [gdm-list] RelaxPermission option not working in gdm 2.20.7-0ubuntu1.1

[Brian Cameron <Brian Cameron Sun COM>]

Simone:

> The Problem in detail
> =====================
> By default it seems that gdm's configuration( /etc/gdm/gdm.conf)
> doesn't like group-writeble homes ::
>
>     # 0 is the most restrictive, 1 allows group write permissions, 2 allows all
>     # write permissions.
>     RelaxPermissions=0
>     # Check if directories are owned by logon user.  Set to false, if
> you have, for
>     # example, home directories owned by some other user.
>     CheckDirOwner=true
>
> So I changed the ``RelaxPermission`` value to ``1`` and checked the
> $HOME/.dmrc permission::

Does setting RelaxPermission to "2" make a difference?  Note that you
probably need to restart GDM by running gdm-restart after making the
change, or else you won't notice the change until next reboot.

Also, you can run this command:

gdmflexiserver --command="GET_CONFIG security/RelaxPermissions"

This will verify what value the GDM daemon is actually using for
the RelaxPermissions configuration setting.  If setting the value to a
higher value does not work, it is good to verify the daemon is actually
using the correct value by running this command.

Try turning on debug in the GDM configuration by setting Enable=true
in the [debug] section, then restarting GDM via gdm-restart.  Before
you do this, make sure that the user's $HOME directory has the
permissions which create the problem.  Then try to log in, so you
see the failure dialog.

Then you should find GDM debug messages in you syslog file
(/var/log/messages or /var/adm/messages depending on your system).
Do the messages there highlight what the problem is?  For this type
of problem, usually the debug log is useful.  Share the messages
as an attachment in a reply if you need help reviewing the messages.
Only send along the section of the syslog with "gdm" related messages.

Brian