OpenSolaris

Printable Version Enter a New Search
Bug ID 6583888
Synopsis [tcde] possible to view labeled windows immediately after login
State 10-Fix Delivered:Needs Verification (Fix available in build)
Category:Subcategory xserver:sec_labeling
Keywords s10patch-approved
Responsible Engineer Lokanath Das
Reported Against s10u4_11
Duplicate Of
Introduced In
Commit to Fix snv_72
Fixed In snv_72
Release Fixed solaris_nevada(snv_72)
Related Bugs
Submit Date 23-July-2007
Last Update Date 7-December-2007
Description
TX S10u4_11.

Issue:- creating an at job to launch dtterm in a labled zone, can result in that labeled window being visible immediately after login.

Testcase:-
1. start with two users
test3 - access to public, internal and needtoknow
test4 - access to public, internal, needtoknow and restricted.

2. login as test4 - in the restricted workspace
create /tmp/at_test
#!/bin/bash
/usr/dt/bin/dtterm

exeute at now+1min < /tmp/at_test

Logout

3. After one minute login as test3 -
On login a dtterm is immediately visible.
complete login - dtterm now shows itself labeled as restricted  - user test4.

There is also an intermittent issue where nautilus labeled windows appear on logging in to TCDE/TJDS. The issue is intermittent - no reproducible testcase available.
Work Around
N/A
Comments
N/A