Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-05 Thread Orion Poplawski
On 03/04/2014 11:59 PM, Frank Knoben wrote: On 03/04/2014 05:36 PM, Orion Poplawski wrote: On 03/04/2014 04:02 AM, Frank Knoben wrote: When I put the lines in the x2gostartagent script after the XAUTHORITY=${XAUTHORITY:-$HOME/.Xauthority} line, the permissions will be fixed on login and

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-04 Thread Orion Poplawski
On 03/04/2014 04:02 AM, Frank Knoben wrote: When I put the lines in the x2gostartagent script after the XAUTHORITY=${XAUTHORITY:-$HOME/.Xauthority} line, the permissions will be fixed on login and not on logout. Unfortunately, restorcon sets the permissions to system_u:object_r:default_t:s0

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-04 Thread Frank Knoben
On 03/04/2014 05:36 PM, Orion Poplawski wrote: On 03/04/2014 04:02 AM, Frank Knoben wrote: When I put the lines in the x2gostartagent script after the XAUTHORITY=${XAUTHORITY:-$HOME/.Xauthority} line, the permissions will be fixed on login and not on logout. Unfortunately, restorcon sets the

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Mike Gabriel
Hi Frank, On Fr 28 Feb 2014 09:22:47 CET, Frank Knoben wrote: Hello Mike, the problem is, that I'm not an expert on selinux too. But I did some more tests. Interactive Session - first login, the ~/.Xauthority file is created and stays after logout with the permissions

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, thank you very much for the proposal, where I could fix the problem for my system. But I still have to think, how to make a permanent workaround in the x2gostartagent script. - if I use icewm windowmanager with selinux and x2goserver / x2goclient everything is fine and the

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0 $HOME/.Xauthority fi test -r

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Mike Gabriel
Hi Frank, On Fr 28 Feb 2014 13:15:41 CET, Frank Knoben wrote: Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, the file permissions only need to be fixed for the next login. During startup, the xauth command needs the selinux file permissions of *unconfined_u:object_r:xauth_home_t:s0* or of *unconfined_u:object_r:user_home_t:s0* to the .Xauthority file, so that it can overwrite the file with

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, I gave some more thoughts to your remark, that the position is the wrong one. And you were right. On a system, where users work interactively at an attached screen and use x2go for accessing the system remotely, the fix won't work at that position. There it should be just before the

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Orion Poplawski
On 02/28/2014 05:15 AM, Frank Knoben wrote: Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0