Re: NM before login?

[Eric Brunet lps ens fr]

Dans son message du jeudi 14/05/09 à 17:05, Dan Williams a écrit:
> On Wed, 2009-05-13 at 23:20 +0200, Eric Brunet lps ens fr wrote:
> > Dans son message du mercredi 13/05/09 à 10:08, Dan Williams a écrit:
> > > Are you running with SELinux in enforcing mode,
> > 
> > /etc/sysconfig/selinux contains the line
> > 
> > 	SELINUX=disabled
> > 
> > (I can only guess that this conf file is actually read and acted upon at
> > boot time; I don't know how to ask the kernel what is the actual current
> > selinux mode. There's probably a file in /sysfs, but I don't know which)
> > 
> > > and what is the version of your selinux-policy-targeted package?
> > 
> > selinux-policy-targeted-3.5.13-58.fc10.noarch
> > 
> > > Second, do you see
> > > "org.freedesktop.network-manager-settings.system.modify" in the output
> > > of "polkit-auth --show-obtainable" ?
> > 
> > Yes I do.
> 
> What's in your /etc/NetworkManager/nm-system-settings.conf file?
> 
Two lines:
	[main]
	plugins=ifcfg-rh

By the way, I tried to boot with SELINUX=enforcing SELINUXTYPE=targeted,
just to be extra sure. I could not login as kdm would crash after I type
my login/password, with X freezing just after. The relevant lines in
/var/log/messages:

  kernel: type=1400 audit(1242370619.482:8): avc: denied  { execute } for  pid=2465 comm="dbus-daemon-lau" name="console-kit-daemon" dev=sda2 ino=2327841 scontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:consolekit_exec_t:s0 tclass=file
  kdm: Cannot open ConsoleKit session: Unable to open session: Cannot launch daemon, file not found or permissions invalid
  kdm: Client start failed
  kdm: Cannot close ConsoleKit session: Unable to close session: no session open

Now I remember why I had disabled selinux in the first place !

Thank you for your help,

	Éric Brunet