Re: help


From: Amon Ott <ao@rsbac.org>
Subject: Re: help
Date: Mon, 10 Jul 2000 11:00:26 +0200

Next Article (by Author): Re: modules dependencies Amon Ott
Previous Article (by Author): Re: ACLs Amon Ott
Articles sorted by: [Date] [Author] [Subject]


> I run into troubles in starting X windows. 'startx' can't work properly,
> and X is unable to be started.
> 
> System:
>       Linux:   2.2.16
>       RSBAC: 1.0.9b
> 
> Cases:
>       When MAC was the only RSBAC module, X windows could run normally.
>       When both MAC and AUTH were active RSBAC modules, X windows failed
> to run.
> 
> Messages:
>       -FontTranSocket/NOT Connect: can't connect: errno=111
>         failed to set default font path 'tcp/localhost:7100'
>         Fatal server error:
>         could not open default font 'fixed'
> 
> Potential cause:
>         '/usr/X11R6/bin/xfs' can not run because of lack of permissions
> concerning AUTH.
> 
> Problem:
>        How to erase the troubles above.

Exact RSBAC syslog entries would be useful here.

Probably the font server xfs wants to setuid and simply lacks a capability for
this uid. You will find the missing uid in the log (attr owner, attr_val uid),
and can then add the cap with
auth_set_cap FILE add <path-to-file> <uid>

Amon.
-
To unsubscribe from the rsbac list, send a mail to
majordomo@rsbac.org with
unsubscribe rsbac
as single line in the body.

Next Article (by Author): Re: modules dependencies Amon Ott
Previous Article (by Author): Re: ACLs Amon Ott
Articles sorted by: [Date] [Author] [Subject]


Go to Compuniverse LWGate Home Page.