On 11/17/21 5:09 PM, Murray Blakeman wrote:
Thank you for responding.  Both libutempter-devel and pam-devel were already installed.


Hi,

To get a clean environment I removed cde, including /var/dt and reinstalled.

Should dtsession be linked against both libraries?


No - utempter is used for writing utmp/utmpx files, and only the terminal wants to do that.

dtsession and dtlogin are the only ones that need PAM support (to verify your login/password).


So the list you posted is correct.

# find /usr/dt/bin -type f -print -exec sh -c "ldd {} | grep -e libpam -e libutemp " \;
/usr/dt/bin/ttrm

[...]

--- starting /usr/dt/bin/dtappgather &
--- execing /usr/dt/bin/dtsession ...
not execing /home/murrayb/.profile (see /home/murrayb/.dtprofile)
changeOwnerGroup: /var/dt/appconfig| : Operation not permitted
changeOwnerGroup: /var/dt/appconfig/appmanager| : Operation not permitted


This might explain your dtfile app list issue.  I reality, dtappgather should just create these links in the ~/.dt/ dir somewhere, but this is not supported currently.

I also found this in my system log;

[Thu Nov 18 10:41:21 2021] dtappgather[1038123]: segfault at 10 ip 0000000000404133 sp 00007ffe41dd14a0 error 4 in dtappgather[400000+8000] [Thu Nov 18 10:41:21 2021] Code: 3a 00 0f 84 9f 00 00 00 48 89 d7 e8 37 d2 ff ff 8b 68 10 ba ff ff ff ff 48 85 db 74 10 80 3b 00 74 25 48 89 df e8 bd d1 ff ff <8b> 50 10 49 8b 3c 24 89 ee e8 4f d1 ff ff 83 f8 ff 74 21 48 83 c4


Probably bad error handling of the above errors.

Setuid on /usr/dt/bin/dtsession made no difference.


Yeah - it's trying to use the PAM library to validate your username/pw, but seems to be failing somewhere along the line.  Is there anything of interest in /var/log/secure* ?

-jon

Disabling selinux also made no difference.

Kind regards

Murray


On Thu, 18 Nov 2021 at 08:56, Jon Trulson <j...@radscan.com <mailto:j...@radscan.com>> wrote:

    On 11/16/21 6:12 PM, Murray Blakeman wrote:
    I've built and installed CDE 2.4.0 using the spec files, etc from;

    https://github.com/mbert/cderpm <https://github.com/mbert/cderpm>

    I did make some minor changes to the spec file but it's
    largely unchanged.

    I'm able to run a CDE session from gdm but I have the following
    issues.

     1. The lock screen can't be unlocked.  It just remains after
        entering the user password to unlock.


    This one may be caused by missing dev packages.  In 2.4.0, support
    for PAM an utempter was added - this makes it possible to run
    dtterm and dtsession w/o needing SUID root.  Make sure that the
    libutempter-devel and pam-devel packages are installed.

     1. The Application Manager has a "generic-display-0" folder in
        the root, rather than the actual applications.  If I open
        that folder, the applications are shown.


    That one, I've not yet seen.

    I've attached some pics for reference.

    Here's some info which may/may not help.

     # ls -lR /var/dt/appconfig/appmanager/
    /var/dt/appconfig/appmanager/:
    total 0
    dr-xr-xr-x. 2 username username 227 Nov 17 11:43 generic-display-0


    Seems like an issue determining your hostname.

    /var/dt/appconfig/appmanager/generic-display-0:
    total 0
    lrwxrwxrwx. 1 username username 42 Nov 17 11:43 brave-browser ->
    /home/username/.dt/appmanager/brave-browser
    lrwxrwxrwx. 1 username username 43 Nov 17 11:43 Desktop_Apps ->
    /usr/dt/appconfig/appmanager/C/Desktop_Apps
    lrwxrwxrwx. 1 username username 44 Nov 17 11:43 Desktop_Tools ->
    /usr/dt/appconfig/appmanager/C/Desktop_Tools
    lrwxrwxrwx. 1 username username 40 Nov 17 11:43 Education ->
    /usr/dt/appconfig/appmanager/C/Education
    lrwxrwxrwx. 1 username username 36 Nov 17 11:43 Games ->
    /usr/dt/appconfig/appmanager/C/Games
    lrwxrwxrwx. 1 username username 39 Nov 17 11:43 Graphics ->
    /usr/dt/appconfig/appmanager/C/Graphics
    lrwxrwxrwx. 1 username username 42 Nov 17 11:43 Information ->
    /usr/dt/appconfig/appmanager/C/Information
    lrwxrwxrwx. 1 username username 39 Nov 17 11:43 Internet ->
    /usr/dt/appconfig/appmanager/C/Internet
    lrwxrwxrwx. 1 username username 42 Nov 17 11:43 Media_Tools ->
    /usr/dt/appconfig/appmanager/C/Media_Tools
    lrwxrwxrwx. 1 username username 37 Nov 17 11:43 Office ->
    /usr/dt/appconfig/appmanager/C/Office
    lrwxrwxrwx. 1 username username 37 Nov 17 11:43 System ->
    /usr/dt/appconfig/appmanager/C/System
    lrwxrwxrwx. 1 username username 43 Nov 17 11:43 System_Admin ->
    /usr/dt/appconfig/appmanager/C/System_Admin
    lrwxrwxrwx. 1 username username 34 Nov 17 11:43 TeX ->
    /usr/dt/appconfig/appmanager/C/TeX

    # ls -l /usr/dt/bin/dtsession
    -rwxr-xr-x. 1 root root 225808 Nov 12 15:38 /usr/dt/bin/dtsession
    # ls -l /usr/dt/bin/dtscreen
    -rwxr-xr-x. 1 root root 63888 Nov 12 15:38 /usr/dt/bin/dtscreen

    I have tried running with both of these files setuid but it
    doesn't make any difference.


    Try making sure those packages I mentioned above are present. 
    dtsession is what handles the password unlock on behalf of dtscreen.

    Also, FYI, I still have selinux active.  I haven't tried running
    with selinux disabled.


    I have never run with that enabled on centos 8 (well, now I am
    running Rocky linux in a VM), so I don't know what effect that
    would have.

    What have I broken in my build/install?


    I think as far as the unlocking at least, you just need the
    utempter package.  Places you can look are ~/.dt/errorlog,
    ~/.dt/startlog, and perhaps other files in ~/.dt/

    -jon

    Regards

    Murray






    _______________________________________________
    cdesktopenv-devel mailing list
    cdesktopenv-devel@lists.sourceforge.net  
<mailto:cdesktopenv-devel@lists.sourceforge.net>
    https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel  
<https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel>

-- Jon Trulson

       "This Unit must survive."
                                -- M5

    _______________________________________________
    cdesktopenv-devel mailing list
    cdesktopenv-devel@lists.sourceforge.net
    <mailto:cdesktopenv-devel@lists.sourceforge.net>
    https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel
    <https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel>



_______________________________________________
cdesktopenv-devel mailing list
cdesktopenv-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel

--
Jon Trulson

  "This Unit must survive."
                           -- M5

_______________________________________________
cdesktopenv-devel mailing list
cdesktopenv-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/cdesktopenv-devel

Reply via email to