[redhat-lspp] /tmp polyinstantiation and the man command

Stephen Smalley sds at tycho.nsa.gov
Tue Nov 28 15:43:22 UTC 2006


On Tue, 2006-11-28 at 10:41 -0500, Linda Knippers wrote:
> Stephen Smalley wrote:
> 
> > Version of policycoreutils-newrole and selinux-policy-mls?
> > Contents of /etc/pam.d/newrole?
> 
> Sorry, I'd mentioned in the call that I was running the latest from
> Dan's people page but omitted it from the mail.  I have these
> rpms.
> 
> policycoreutils-1.33.2-2.el5
> policycoreutils-newrole-1.33.2-2.el5
> selinux-policy-mls-2.4.5-3.el5
> selinux-policy-2.4.5-3.el5
> 
> /etc/pam.d/newrole has this:
> #%PAM-1.0
> auth       include      system-auth
> account    include      system-auth
> password   include      system-auth
> session    include      system-auth
> session    optional     pam_xauth.so

I would have expected the latter to include:
session    required     pam_namespace.so unmnt_remnt no_unmount_on_close

-- 
Stephen Smalley
National Security Agency




More information about the redhat-lspp mailing list