Re: semodule

[Stephen Smalley <sds tycho nsa gov>]

On Fri, 2009-06-05 at 10:19 -0400, Stephen Smalley wrote:
> On Fri, 2009-06-05 at 06:54 -0700, Vadym Chepkov wrote:
> > 
> > --- On Thu, 6/4/09, Daniel J Walsh <dwalsh redhat com> wrote:
> > > No idea how windbind woul change this.
> > > 
> > 
> > But it does. Shall I submit bugzilla ticket about it?
> 
> Looks like pam_winbind can change the PAM_USER value.  Which could
> confuse pam_selinux.

Found this thread:
http://www.mail-archive.com/samba lists samba org/msg15640.html

Can you configure winbind with use default domain=yes?

-- 
Stephen Smalley
National Security Agency