Conversation
Add proper selinux permissions, tested on Fedora 42 It only needs to set /usr/bin/kmscon as shell_exec_t, otherwise selinux prevents to start /bin/bash when you login. Signed-off-by: Jocelyn Falempe <[email protected]>
|
fyi there is already a fedora selinux-policy upstream kmscon module, why wasn't it used? they might need to enable it or you likely can also ask them if you can take it over Also, we worked on some fixes for kmscon 9, just created a PR there |
|
@ca-hu I wasn't aware that there was an upstream selinux-policy for kmscon. Do you have an example of the changes required to use the fedora selinux-policy? Also FYI, I'm reviving the kmscon/libtsm packages for Fedora: |
If the fedora selinux policy maintainers decide to activate the module, then it likely will come with the distribution and I think you can just drop the selinux stuff here and it will just work. |
Add proper selinux permissions, tested on Fedora 42.
It only needs to set /usr/bin/kmscon as shell_exec_t, otherwise selinux prevents to start /bin/bash when you login.