Bug 172318 - SELinux prevents writing to konsole temp file for commands launched as root (su -)
Summary: SELinux prevents writing to konsole temp file for commands launched as root (...
Status: RESOLVED LATER
Alias: None
Product: konsole
Classification: Applications
Component: general (show other bugs)
Version: 2.1
Platform: Fedora RPMs Linux
: NOR wishlist
Target Milestone: ---
Assignee: Konsole Developer
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2008-10-07 10:09 UTC by Giacomo Montagner
Modified: 2008-10-07 11:37 UTC (History)
1 user (show)

See Also:
Latest Commit:
Version Fixed In:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Giacomo Montagner 2008-10-07 10:09:14 UTC
Version:           2.1 (using KDE 4.1.1)
OS:                Linux
Installed from:    Fedora RPMs

Hi, 
I post this as a "wish" because I'm not sure it's really a bug... it seems mostly related to SELinux policy rather than to konsole. The problem is the following: 

when switching user with 
su - 
and becoming root, sometimes (very often indeed, although not every time) I get error messages such this: 

SELinux is preventing <process> from using potentially mislabeled files (/tmp/kde-${USER}zHTeRF/konsoleat5970.tmp).

This seemed to me more like a feature than a bug: SELinux is preventing some "root-property" output to get dumped to a normal-user file. But it's getting really annoying, I keep getting popups from sealert every time (ok, almost every time) I fire a command... 

Is there a way to get rid of these messages? Of course the first thing I tried was 
restorecon -Rv /tmp   # I put this in my rc.local
and then 
touch /.autorelabel

But, as I said, it seems it's more like a feature than a bug, but it's really annoying anyway.

Thanks, 
cheers. 

Giacomo.
Comment 1 Robert Knight 2008-10-07 11:37:48 UTC
Hi Giacomo,

Please report this to Fedora since this relates to their SELinux setup, or even if it is SELinux in general.  If it turns out that there is something that should be changed in Konsole then they can file a bug here.