canonical / lightdm

Display Manager
GNU General Public License v3.0
827 stars 138 forks source link

data/apparmor/lightdm-guest-session.in: Allow l operation on /run/use… #319

Open sunweaver opened 1 year ago

sunweaver commented 1 year ago

…r/*/ICEauthority-l.

This resolves long login delays into X11 guest sessions when using Arctica Greeter (forked from Unity Greeter). While waiting for the desktop to appear, the screen stays black and a non-WM'ed dialog box appears on screen, saying: "Could not update ICEauthority file /run/user//ICEauthority".

When testing with MATE desktop, apparmor denies esp. creating this link operation: operation="link" class="file" profile="/lightdm-guest-session" name="/run/user/997/ICEauthority-l" pid= comm="mate-session" requested_mask="l" denied_mask="l" fsuid= ouid= target="/run/user//ICEauthority-c"

Similar in Xfce4: operation="link" class="file" profile="/lightdm-guest-session" name="/run/user/997/ICEauthority-l" pid= comm="iceauth" requested_mask="l" denied_mask="l" fsuid= ouid= target="/run/user//ICEauthority-c"