This thread contains a patchset. You're looking at the original emails, but you may wish to use the patch review UI. Review patch

[PATCH] Document SELinux error

Message ID
DKIM signature
Download raw message
Patch: +10 -0
 index.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/index.md b/index.md
index c540c319e5ce..90dc2b73c31b 100644
--- a/index.md
+++ b/index.md
@@ -210,6 +210,16 @@ The default greetd configuration uses `agreety` (which looks just like `agetty`

You can change the configuration as mentioned in the steps above to make `agreety` start another login environment of your choice (e.g. `sway`), or use a different greeter altogether.

## greetd fails with `unable to exec: Sys(EACCES)`

This is due to SELinux policies. You will need to run the following commands to
unblock `greetd`:

semanage fcontext -a -ff -t xdm_exec_t /usr/bin/greetd
restorecon /usr/bin/greetd

## greetd fails with `unable to lock pages: Sys(ENOMEM)`

greetd *must* be started as root, as it must perform a few privileged actions. This error is usually the result of attempting to run greetd as another user, which will fail immediately as `mlockall(3)` is attempted at startup (done to block greetd miniscule memory allocations from being swapped to disk). Later PAM operations also expect to be run by root/CAP_SYS_ADMIN as well.
Reply to thread Export thread (mbox)