Re: new PAM and policy to match

[Dale Amon <amon@vnl.com>]

Russ: We're getting there but I've finally got an
selinux system using your packages that I can log into.
That's the good news.

The problem areas are:

	* I had to delete later.te.
	* redhat-config-users.te had no matching tc
	  file. I didn't need it anyway so I deleted
	  it

With those mods I was able to build the policy file.
After rolling in my image with rsync, I logged into
the non-initrd choice and:

	tune2fs -j /dev/hda2	# set up ext2->ext3
	make load
	make relabel

which works. I can see the file contexts with ls. Then
I reboot through the initrd version. This time, for the
first time since I switched package repositories, I
was able to login to the selinux enabled kernel. 

Problem though... it is not giving a context or asking
for a choice of initial contexts; and newrole doesn't
recognize sysadm_r. 

I'd guess there is/are still incorrect package version(s)
being loaded out of 
	coker
	walters
	sid
but I'll be damned if I can figure out what and why.

-- 
------------------------------------------------------
   Dale Amon     amon@islandone.org    +44-7802-188325
       International linux systems consultancy
     Hardware & software system design, security
    and networking, systems programming and Admin
	      "Have Laptop, Will Travel"
------------------------------------------------------

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.