[redhat-lspp] newrole error

[Stephen Smalley]

On Wed, 2007-01-17 at 10:45 -0500, Stephen Smalley wrote:
> On Wed, 2007-01-17 at 08:59 -0600, Xavier Toth wrote:
> > I currently have policycoreutils-1.33.12-1.el5 installed but Dan say I
> > need policycoreutils-1.33.12-2.el5 or greater. However I didn't find
> > this version on his people page.
> 
> The session line in your /etc/pam.d/newrole is commented out.  You need
> to have something for the session module or newrole will fail.  If you
> don't care about namespaces, then just use
> 	session required pam_permit.so
> or if you want namespaces, uncomment the existing line.

...and uncomment lines in your namespace.conf too; otherwise, you won't
get any polyinstantiation.

-- 
Stephen Smalley
National Security Agency