-
Bug
-
Resolution: Unresolved
-
Major
-
None
-
rhel-9.3.0
-
None
-
None
-
None
-
3
-
rhel-sst-display-desktop-foundation
-
ssg_display
-
None
-
False
-
-
None
-
DESKTOP Cycle #1 10.0 phase, DESKTOP Cycle #2 10.0 phase, DESKTOP Cycle #3 10.0 phase
-
None
-
None
-
None
What were you trying to do that didn't work?
When the /home mountpoint is mounted with the noexec option, the GNOME kiosk script fails to execute.
Please provide the package NVR for which bug is seen:
40.0-5
How reproducible: 100%
Steps to reproduce
- Mount the home directory with the noexec option.
- Attempt to run a GNOME Kiosk script session.
Expected results
Kiosk script executes successfully
Actual results
Kiosk script fails to execute with an "access denied" error.
Additional notes
In US DISA STIG policy for RHEL 8 and 9, the /home directory is required to have the noexec option set. This did not prevent the GNOME Kiosk script from executing in RHEL 8; however, the new kiosk script scheme for RHEL 9 causes this to fail.