[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-devel
Subject:    kdm / selinux patch
From:       Luke Kenneth Casson Leighton <lkcl () lkcl ! net>
Date:       2004-11-28 14:33:20
Message-ID: 20041128143320.GA9261 () lkcl ! net
[Download RAW message or body]

dear kde developers,

please could you examine the following url and patch kdm to work with
selinux.

	http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=249784

kdm does not work with pam_selinux.so because the ordering of the code
(something to do with where and when ttys are created) is incorrect.

it is far better to have a patched kdm where people are less
likely to mess with the ordering of the patched code than for
people to mess with where and when pam sessions are created
(which has happened with so many projects, openssh being the
last known example where someone moved the pam session code
a few significant but selinuxxly-fatal lines, it's not true).


gdm already has a similar patch to use selinux direct like this.
wdm already has a similar patch to use selinux direct like this.


_please_ patch kdm because i am utterly fed up with having to rebuild
kde from scratch every time there's a new release of kde and it takes
forever.

yes the patch works.

yes there is ZERO impact on people who do not use selinux: libselinux1
automatically detects whether the kernel is selinux enabled or not and
does absolutely nothing where it is disabled.

yes there are a boat-load of other projects requiring libselinux1 now.

thank you,

l.

-- 
--
<a href="http://lkcl.net">http://lkcl.net</a>
--
 
>> Visit http://mail.kde.org/mailman/listinfo/kde-devel#unsub to unsubscribe <<
[prev in list] [next in list] [prev in thread] [next in thread]