Re: semodule

[Stephen Smalley <sds tycho nsa gov>]

On Fri, 2009-06-05 at 09:40 -0700, Vadym Chepkov wrote:
> --- On Fri, 6/5/09, Stephen Smalley <sds tycho nsa gov> wrote:
> > 
> > Can you append "debug" to the arguments to the latter
> > instance of
> > pam_selinux.so, e.g.:
> > session    required 
> >    pam_selinux.so open env_params debug
> > 
> > And then login again via ssh and look in /var/log/secure?
> > 
> 
> No changes at all, same error about ssh_selinux_setup_pty.
> To answer your other post, I compared pam.d/sshd with freshly installed F10, they are identical. I am attaching both files in question. 
> Thank you for your help.

You should have gotten some pam_selinux log messages in /var/log/secure
if you added the debug option and logged into the system again.

-- 
Stephen Smalley
National Security Agency