On Wed, 2007-01-17 at 10:45 -0500, Stephen Smalley wrote: > On Wed, 2007-01-17 at 08:59 -0600, Xavier Toth wrote: > > I currently have policycoreutils-1.33.12-1.el5 installed but Dan say I > > need policycoreutils-1.33.12-2.el5 or greater. However I didn't find > > this version on his people page. > > The session line in your /etc/pam.d/newrole is commented out. You need > to have something for the session module or newrole will fail. If you > don't care about namespaces, then just use > session required pam_permit.so > or if you want namespaces, uncomment the existing line.
...and uncomment lines in your namespace.conf too; otherwise, you won't get any polyinstantiation. -- Stephen Smalley National Security Agency -- redhat-lspp mailing list [email protected] https://www.redhat.com/mailman/listinfo/redhat-lspp
