Re: console-kit-domain

[Stephen Smalley <sds tycho nsa gov>]

On Thu, 2007-01-25 at 08:22 -0500, Daniel J Walsh wrote:
> Tom London wrote:
> > Running latest rawhide, targeted/enforcing.
> >
> > 'console-kit-daemon' is running as initrc_t.
> >
> > I'm getting the following AVC:
> >
> > type=USER_AVC msg=audit(1169660835.581:34): user pid=2558 uid=81
> > auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:
> > denied  { send_msg } for msgtype=method_call
> > interface=org.freedesktop.ConsoleKit.Manager
> > member=OpenSessionWithParameters dest=org.freedesktop.ConsoleKit
> > spid=3363 tpid=3018 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023
> > tcontext=system_u:system_r:initrc_t:s0 tclass=dbus :
> > exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
> >
> > [root localhost ~]# ls -lZ /usr/sbin/console*
> > -rwxr-xr-x  root root system_u:object_r:sbin_t
> > /usr/sbin/console-kit-daemon
> > [root localhost ~]#
> >
> > Should /usr/sbin/console-kit-daemon be xdm_exec_t ?
> >
> > tom
> >
> > [Not sure how to BZ this.... ConsoleKit package is not listed in 
> > bugzilla.]
> I don't know what ConsoleKit is?  Is it a replacement for xdm?  Still 
> running in RHEL5, until GA so I am a little behind on my Rawhide use.

Described as a "system-wide service that tracks users, sessions, and
seats."  Dependency of multi-seat and fast user switching support.  See:
http://fedoraproject.org/wiki/Desktop/FastUserSwitching