Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-05 Thread Orion Poplawski
On 03/04/2014 11:59 PM, Frank Knoben wrote: > On 03/04/2014 05:36 PM, Orion Poplawski wrote: >> On 03/04/2014 04:02 AM, Frank Knoben wrote: >>> When I put the lines in the x2gostartagent script >>> >>> after the >>> >>> XAUTHORITY=${XAUTHORITY:-"$HOME/.Xauthority"} >>> >>> line, the permissions wil

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-04 Thread Frank Knoben
On 03/04/2014 05:36 PM, Orion Poplawski wrote: On 03/04/2014 04:02 AM, Frank Knoben wrote: When I put the lines in the x2gostartagent script after the XAUTHORITY=${XAUTHORITY:-"$HOME/.Xauthority"} line, the permissions will be fixed on login and not on logout. Unfortunately, restorcon sets th

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-03-04 Thread Orion Poplawski
On 03/04/2014 04:02 AM, Frank Knoben wrote: When I put the lines in the x2gostartagent script after the XAUTHORITY=${XAUTHORITY:-"$HOME/.Xauthority"} line, the permissions will be fixed on login and not on logout. Unfortunately, restorcon sets the permissions to system_u:object_r:default_t:s0

Re: [X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Orion Poplawski
On 02/28/2014 05:15 AM, Frank Knoben wrote: Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0 $H

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, I gave some more thoughts to your remark, that the position is the wrong one. And you were right. On a system, where users work interactively at an attached screen and use x2go for accessing the system remotely, the fix won't work at that position. There it should be just before the

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, the file permissions only need to be fixed for the next login. During startup, the xauth command needs the selinux file permissions of *unconfined_u:object_r:xauth_home_t:s0* or of *unconfined_u:object_r:user_home_t:s0* to the .Xauthority file, so that it can overwrite the file with th

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Mike Gabriel
Hi Frank, On Fr 28 Feb 2014 13:15:41 CET, Frank Knoben wrote: Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon unconfined_u:object_

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, what about the following solution / proposal for the x2goruncommand script: # run logout scripts FIX_XAUTH=`ls -Z $HOME/.Xauthority | egrep default_t` if test -n $FIX_AUTH then /usr/bin/chcon unconfined_u:object_r:xauth_home_t:s0 $HOME/.Xauthority fi test -r /etc/x2go/x2go_lo

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Mike Gabriel
Hi Frank, On Fr 28 Feb 2014 12:12:43 CET, Frank Knoben wrote: Hi Mike, thank you very much for the proposal, where I could fix the problem for my system. But I still have to think, how to make a permanent workaround in the x2gostartagent script. - if I use icewm windowmanager with selin

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Frank Knoben
Hi Mike, thank you very much for the proposal, where I could fix the problem for my system. But I still have to think, how to make a permanent workaround in the x2gostartagent script. - if I use icewm windowmanager with selinux and x2goserver / x2goclient everything is fine and the .Xauthori

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-28 Thread Mike Gabriel
Hi Frank, On Fr 28 Feb 2014 09:22:47 CET, Frank Knoben wrote: Hello Mike, the problem is, that I'm not an expert on selinux too. But I did some more tests. Interactive Session - first login, the ~/.Xauthority file is created and stays after logout with the permissions *system_u:object_r:defa

[X2Go-Dev] Bug#438: x2goserver and rhel6.4 / selinux Problem

2014-02-27 Thread Mike Gabriel
Control: tag -1 moreinfo Hi Frank, --- ls -Z .Xauthority -rw---. frank users unconfined_u:object_r:default_t:s0 .Xauthority -- Then I do a logout. Now, when I try to connect again to the x2go server system, I get the following error mes