The problem is the line NEVER_FAILS_root_set_euid_egid (0, 0);
in the "sanitize .ICEauthority ..." block in daemon/slave.c ~line 3500. Later on (line 3557) only the process's uid is setuid to the user's uid, while the gid stays unchanged (and hence fails the setgid check in the first GTK application to be execed, typically gnome-session). The attached patch fixes it for me. Cheers, Roderich
gdm.patch
Description: Binary data