~kennylevinsen/greetd-devel

Document SELinux error v1 APPLIED

Tom Lebreux: 1
 Document SELinux error

 1 files changed, 10 insertions(+), 0 deletions(-)
Export patchset (mbox)
How do I use this?

Copy & paste the following snippet into your terminal to import this patchset into git:

curl -s https://lists.sr.ht/~kennylevinsen/greetd-devel/patches/21684/mbox | git am -3
Learn more about email & git
View this thread in the archives

[PATCH] Document SELinux error Export this patch

---
 index.md | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/index.md b/index.md
index c540c319e5ce..90dc2b73c31b 100644
--- a/index.md
+++ b/index.md
@@ -210,6 +210,16 @@ The default greetd configuration uses `agreety` (which looks just like `agetty`

You can change the configuration as mentioned in the steps above to make `agreety` start another login environment of your choice (e.g. `sway`), or use a different greeter altogether.

## greetd fails with `unable to exec: Sys(EACCES)`

This is due to SELinux policies. You will need to run the following commands to
unblock `greetd`:

```sh
semanage fcontext -a -ff -t xdm_exec_t /usr/bin/greetd
restorecon /usr/bin/greetd
```

## greetd fails with `unable to lock pages: Sys(ENOMEM)`

greetd *must* be started as root, as it must perform a few privileged actions. This error is usually the result of attempting to run greetd as another user, which will fail immediately as `mlockall(3)` is attempted at startup (done to block greetd miniscule memory allocations from being swapped to disk). Later PAM operations also expect to be run by root/CAP_SYS_ADMIN as well.
-- 
2.30.2