Nomachine 4 in a Fedora 20 physical desktop and SELinux

[fidelleon]

When using Nomachine 4.0.369 (it also happened in previous versions) in a Fedora 20 (also in 19) box with SELinux enabled, I always get two different alerts, one for pulseaudio:

type=AVC msg=audit(1389033815.453:1656): avc:  denied  { append } for  pid=25046 comm=”pulseaudio” path=”/usr/NX/var/log/nxerror.log” dev=”sdb3″ ino=939026 scontext=system_u:system_r:pulseaudio_t:s0 tcontext=unconfined_u:object_r:usr_t:s0 tclass=file

and one for dbus-daemon and (likely) the fingerprint authentification module:

type=USER_AVC msg=audit(1389033249.408:1645): pid=616 uid=81 auid=4294967295 ses=4294967295  subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg=’avc:  denied  { send_msg } for msgtype=method_return dest=:1.287 spid=24590 tpid=24608 scontext=system_u:system_r:fprintd_t:s0 tcontext=system_u:system_r:initrc_t:s0 tclass=dbus  exe=”/usr/bin/dbus-daemon” sauid=81 hostname=? addr=? terminal=?’

which prevents initial login (I’m asked for my user and password), needing two or three tries to login.

[andrew]

We were able to reproduce this. A workaround is to restart nxserver (/etc/NX/nxserver –restart) after every system restart. Additionally please execute the command ‘chcon -t var_log_t /usr/NX/var/log/nxerror.log’ which changes the SELinux context for that file.
More details about the workaround can be found in the Trouble Report here: https://www.nomachine.com/TR01L04196.

[fidelleon]

Oh, sorry, I used the forum’s search function but didn’t find such article, I apologize for the redundant noise.

I have followed such steps and login works fine now. Thanks!

[Britgirl]

Thanks for bringing it to the forums 😉 As well as the forums, you can search for known bugs here: https://www.nomachine.com/troublereports. From there you can also look for other topics within the knowledge base.

Britgirl

[Author]

Posts