[redhat-lspp] newrole error

[Stephen Smalley]

On Wed, 2007-01-17 at 08:59 -0600, Xavier Toth wrote:
> I currently have policycoreutils-1.33.12-1.el5 installed but Dan say I
> need policycoreutils-1.33.12-2.el5 or greater. However I didn't find
> this version on his people page.

The session line in your /etc/pam.d/newrole is commented out.  You need
to have something for the session module or newrole will fail.  If you
don't care about namespaces, then just use
	session required pam_permit.so
or if you want namespaces, uncomment the existing line.

-- 
Stephen Smalley
National Security Agency