up2date/seaudit/... not working (EXPLAINED)

[Tom London]

That fixed it!!!!!

'su' no longer takes 20 seconds to complete!

The root shell still has XAUTHORITY set to /root/.xauthABCD, but commands
(like seaudit, up2date) now work. 

Thanks for the speedy response!
   tom

------------------------------------------------------------------------

    * /From/: Stephen Smalley <sds epoch ncsc mil>
    * /To/: "Fedora SELinux support list for users & developers."
      <fedora-selinux-list redhat com>
    * /Cc/: Russell Coker <russell coker com au>, Daniel J Walsh <dwalsh
      redhat com>
    * /Subject/: Re: up2date/seaudit/... not working (EXPLAINED)
    * /Date/: Fri, 18 Jun 2004 16:24:18 -0400

------------------------------------------------------------------------

On Fri, 2004-06-18 at 15:00, Tom London wrote:
> Running off of the development tree, I couldn't get graphical apps (like 
> up2date, seaudit, ...) working when su'ed as root.  All of this works 
> fine on a 'stock FC2' machine (running off
> of the base and released-updates trees).

Try moving the 'pam_selinux.so open multiple' line before the
'pam_xauth.so' line in /etc/pam.d/su.  Dan, this is necessary under the
current policy to get xauth to run with the right permissions for the
new domain.

-- 
Stephen Smalley <sds epoch ncsc mil>
National Security Agency