[Clip] Unexpected role change from custom role back to user_r

[Brian Williams]

> -----Original Message-----
> From: clip-bounces at oss.tresys.com [mailto:clip-bounces at oss.tresys.com]
> On Behalf Of Stephen Smalley
> Sent: Wednesday, May 27, 2009 1:41 PM
> To: West, Gary-P55389
> Cc: clip at oss1.tresys.com; selinux at tycho.nsa.gov
> Subject: Re: [Clip] Unexpected role change from custom role back to
> user_r
> 
> On Wed, 2009-05-27 at 10:23 -0700, West, Gary-P55389 wrote:
> > I have a custom SELinux policy (based on clip), user and role that
> > will login through X windows. When the user logs in, see the
> > USER_ROLE_CHANGE to the desired role. All X clients have the user_r
> > and user_t and not the custom role and type shown in the
> > USER_ROLE_CHANGE message. Can someone explain how this secondary role
> > change would happen?
> 
> Not offhand.  Can you supply more details, please?
> 

Please include not only details on the policy but also the default_contexts
file.  This file tells X what roles and types to try when users log in.  If
a role is not in this file, there is a chance that xdm (or whatever is
logging you in) could not even try the custom role and type because it is
not in the list to try.  

> --
> Stephen Smalley
> National Security Agency
> 
> _______________________________________________
> Clip mailing list
> Clip at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/clip