From 2c2df658abe1e15efe1034d566c819f823784b53 Mon Sep 17 00:00:00 2001
From: Rex Dieter <rdieter@fedoraproject.org>
Date: Jan 03 2012 20:43:20 +0000
Subject: kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)


---

diff --git a/kde-workspace-4.7.95-kdm_xauth.patch b/kde-workspace-4.7.95-kdm_xauth.patch
new file mode 100644
index 0000000..5c7a388
--- /dev/null
+++ b/kde-workspace-4.7.95-kdm_xauth.patch
@@ -0,0 +1,16 @@
+diff -up kde-workspace-4.7.95/kdm/backend/auth.c.selinux_wtf kde-workspace-4.7.95/kdm/backend/auth.c
+--- kde-workspace-4.7.95/kdm/backend/auth.c.selinux_wtf	2011-12-20 18:40:36.000000000 -0600
++++ kde-workspace-4.7.95/kdm/backend/auth.c	2012-01-03 14:33:38.931306044 -0600
+@@ -1292,6 +1292,12 @@ removeUserAuthorization(struct display *
+ 
+     if (!(auths = d->authorizations))
+         return;
++
++    /* given that the code below doesn't handle the forceUserAuthDir case, */
++    /* let's just bail out for now, see http://bugs.kde.org/242065         */
++    if ( d->forceUserAuthDir ) 
++        return;
++
+     debug("removeUserAuthorization\n");
+     startUserAuth(name, new_name, &old, &new);
+     if (new) {
diff --git a/kdebase-workspace.spec b/kdebase-workspace.spec
index 0691ba7..bba4803 100644
--- a/kdebase-workspace.spec
+++ b/kdebase-workspace.spec
@@ -9,7 +9,7 @@
 Summary: KDE Workspace
 Name:    kdebase-workspace
 Version: 4.7.95
-Release: 2%{?dist}
+Release: 3%{?dist}
 
 License: GPLv2
 Group:   User Interface/Desktops
@@ -75,6 +75,11 @@ Patch50: kde-workspace-4.7.80-kde#171685.patch
 # use /etc/login.defs to define a 'system' account instead of hard-coding 500 
 Patch52: kde-workspace-4.7.80-bz#732830-login.patch
 
+# kdm overwrites ~/.Xauthority with wrong SELinux context on logout
+# http://bugzilla.redhat.com/567914
+# http://bugs.kde.org/242065
+Patch53: kde-workspace-4.7.95-kdm_xauth.patch
+
 ## upstream patches
 # omit MALLOC_CHECK_ from startkde
 Patch100: kde-workspace-4.7.95-no_malloc_check.patch
@@ -388,6 +393,7 @@ Requires: akonadi
 # upstreamable patches
 %patch50 -p1 -b .kde#171685
 %patch52 -p1 -b .bz#732830-login
+%patch53 -p1 -b .kdm_xauth
 
 # upstream patches
 %patch100 -p1 -b .no_malloc_check
@@ -912,6 +918,9 @@ fi
 
 
 %changelog
+* Tue Jan 03 2012 Rex Dieter <rdieter@fedoraproject.org> 4.7.95-3
+- kdm overwrites ~/.Xauthority with wrong SELinux context on logout (#567914,kde#242065)
+
 * Thu Dec 29 2011 Rex Dieter <rdieter@fedoraproject.org> 4.7.95-2
 - startkde: omit MALLOC_CHECK_ debug'ery