su fails due to pam_selinux.so

[Stephen Smalley]

On Mon, 2004-06-07 at 16:20, Jonathan Corbet wrote:
> Silly me, I just did a rawhide update on my system.  Now "su" fails, and
> /var/log/messages shows:
> 
> Jun  7 13:55:13 bike su: PAM unable to dlopen(/lib/security/$ISA/pam_selinux.so)
> Jun  7 13:55:13 bike su: PAM [dlerror: /lib/security/../../lib64/security/pam_selinux.so: 
> 		         undefined symbol: is_selinux_mls_enabled]
> Jun  7 13:55:13 bike su: PAM adding faulty module: /lib/security/$ISA/pam_selinux.so
> 
> I do believe I'll go tweak my PAM config before I lose control of the
> system entirely.  
> 
> Anybody see anything that I might have done obviously wrong, or is this
> just a bug?

Dan merged the MLS support into the latest pam_selinux, which depends on
is_selinux_mls_enabled() being present in libselinux.
is_selinux_mls_enabled() was added to libselinux 1.8.  Current
libselinux stable version is 1.12, current development version is 1.13. 
Dan, need to rebuild newer libselinux for other architectures?


-- 
Stephen Smalley <sds at epoch.ncsc.mil>
National Security Agency