Re: semodule

[Stephen Smalley <sds tycho nsa gov>]

On Fri, 2009-06-05 at 08:09 -0700, Vadym Chepkov wrote:
> --- On Fri, 6/5/09, Stephen Smalley <sds tycho nsa gov> wrote:
> 
> > Found this thread:
> > http://www.mail-archive.com/samba lists samba org/msg15640.html
> > 
> > Can you configure winbind with use default domain=yes?
> > 
> 
> I do have have such setup. Both type of users are affected: local and "winbind"

Can you append "debug" to the arguments to the latter instance of
pam_selinux.so, e.g.:
session    required     pam_selinux.so open env_params debug

And then login again via ssh and look in /var/log/secure?

-- 
Stephen Smalley
National Security Agency