up2date/seaudit/... not working (EXPLAINED)

Stephen Smalley sds at epoch.ncsc.mil
Fri Jun 18 20:24:18 UTC 2004


On Fri, 2004-06-18 at 15:00, Tom London wrote:
> Running off of the development tree, I couldn't get graphical apps (like 
> up2date, seaudit, ...) working when su'ed as root.  All of this works 
> fine on a 'stock FC2' machine (running off
> of the base and released-updates trees).

Try moving the 'pam_selinux.so open multiple' line before the
'pam_xauth.so' line in /etc/pam.d/su.  Dan, this is necessary under the
current policy to get xauth to run with the right permissions for the
new domain.

-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency




More information about the fedora-selinux-list mailing list