[Konsole-devel] [Bug 172318] New: SELinux prevents writing to konsole temp file for commands launched as root (su -)

[Giacomo Montagner]

http://bugs.kde.org/show_bug.cgi?id=172318

           Summary: SELinux prevents writing to konsole temp file for
                    commands launched as root (su -)
           Product: konsole
           Version: 2.1
          Platform: Fedora RPMs
        OS/Version: Linux
            Status: UNCONFIRMED
          Severity: wishlist
          Priority: NOR
         Component: general
        AssignedTo: konsole-devel at kde.org
        ReportedBy: mantager at gmail.com


Version:           2.1 (using KDE 4.1.1)
OS:                Linux
Installed from:    Fedora RPMs

Hi, 
I post this as a "wish" because I'm not sure it's really a bug... it seems
mostly related to SELinux policy rather than to konsole. The problem is the
following: 

when switching user with 
su - 
and becoming root, sometimes (very often indeed, although not every time) I get
error messages such this: 

SELinux is preventing <process> from using potentially mislabeled files
(/tmp/kde-${USER}zHTeRF/konsoleat5970.tmp).

This seemed to me more like a feature than a bug: SELinux is preventing some
"root-property" output to get dumped to a normal-user file. But it's getting
really annoying, I keep getting popups from sealert every time (ok, almost
every time) I fire a command... 

Is there a way to get rid of these messages? Of course the first thing I tried
was 
restorecon -Rv /tmp   # I put this in my rc.local
and then 
touch /.autorelabel

But, as I said, it seems it's more like a feature than a bug, but it's really
annoying anyway.

Thanks, 
cheers. 

Giacomo.


-- 
Configure bugmail: http://bugs.kde.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.