Linda Knippers wrote:
>>>I'm not sure this is a bug, unless of course we want sysadm_r to be able to
>>>configure NetLabel.  Please try running netlabelctl as secadm_r and report
>>>the results.
>>
>>secadm is able to execute netlabelctl. sysadm_r used to be able to run it as
>>well. Why was it changed in the first place, and should sysadm_r be able to
>>execute it since it is supposed to be a powerful role?
> 
> 
> I think sysadm_r should be able to run it, and it can on my system.  I'm
> running an older policy though (selinux-policy-mls-2.4.6-38.el5) and older
> ssh bits.  I'll try updating one and then the other.

I updated to selinux-policy-mls-2.4.6-45.el5 and now I see the problem too.

-- ljk

--
redhat-lspp mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/redhat-lspp

Reply via email to