Use with file context rules labeling plasmalogin binaries as xdm_exec_t instead
Some checks failed
Build RPMs / build (sonic-interface-libraries.spec) (push) Failing after 9s
Build RPMs / build (sonic-win.spec) (push) Failing after 9s
Build RPMs / build (sonic-workspace.spec) (push) Failing after 6s

This commit is contained in:
Anders da Silva Rytter Hansen 2026-06-30 17:16:16 -03:00
commit 4e91804f0a
4 changed files with 32 additions and 15 deletions

View file

@ -0,0 +1,7 @@
# Label the plasmalogin daemon and helper binaries as X display manager
# executables so they run in the xdm_t domain on SELinux enforcing systems.
/usr/bin/plasmalogin -- system_u:object_r:xdm_exec_t:s0
/usr/libexec/plasmalogin-helper -- system_u:object_r:xdm_exec_t:s0
/usr/libexec/plasmalogin-helper-start-x11user -- system_u:object_r:xdm_exec_t:s0
/usr/libexec/plasma-login-greeter -- system_u:object_r:xdm_exec_t:s0