Bug 274087

Summary:	xdm starts with keyboard, mouse and synaptics touchpad all out of works.
Product:	Gentoo Linux	Reporter:	Hongjiu Zhang <voidprayer>
Component:	Hardened	Assignee:	The Gentoo Linux Hardened Team <hardened>
Status:	RESOLVED DUPLICATE
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	x86
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---
Attachments:	Log produced by metalog

Description Hongjiu Zhang 2009-06-14 04:27:55 UTC

I am using hardened SELinux profile and enabled xcb USE flag. ACCEPT_KEYWORDS="~x86". Using KDE 4.2.4.

I use a runlevel called gui to start xdm. With "softlevel=gui", I can easily have my kdm started but I cannot move the pointer with my mouse or my touchpad, or input anything with my keyboard. 

However, if I start my system without "softlevel=gui" and log into the root and type "/etc/init.d/xdm start", everything works okay.

I used:

paxctl -zpemrxs /usr/bin/Xorg
paxctl -zmxe /usr/kde/4.2/bin/*
paxctl -zpemrxs /usr/kde/4.2/bin/nemopukservicestub


Reproducible: Always

Steps to Reproduce:
1.I am using hardened SELinux profile and enabled xcb USE flag. ACCEPT_KEYWORDS="~x86". Using KDE 4.2.4.
2.rc-update add xdm gui
3.
paxctl -zpemrxs /usr/bin/Xorg
paxctl -zmxe /usr/kde/4.2/bin/*
paxctl -zpemrxs /usr/kde/4.2/bin/nemopukservicestub
4. start the kernel with "softlevel=gui".

Actual Results:  
kdm starts and everything stop works.

Expected Results:  
At least i should be able to type something in the textbox.

metalog produced /var/log/everything/current. it is pasted.

Comment 1 Hongjiu Zhang 2009-06-14 04:29:18 UTC

Created attachment 194611 [details]
Log produced by metalog

/var/log/everything/log

Comment 2 Hongjiu Zhang 2009-06-14 04:33:26 UTC

By the way, I followed the "running Xorg on hardened Gentoo" at first and cannot run Xorg. It immediately returns "Killed" at once. So please forgive me to paxctl -zpemrxs /usr/bin/Xorg. So do /usr/kde/4.2/bin/nemopukservicestub. And I disabled RANDEXEC for kde's everything because of kde's some features about OpenGL (mainly KWin's composition). Log says that PaX denied libGL.so and terminate the kwin and systemsettings and so on.

Comment 3 Hongjiu Zhang 2009-06-23 05:07:46 UTC


*** This bug has been marked as a duplicate of bug 251093 ***