Re: question about pam_selinux multiple option

[Daniel J Walsh <dwalsh@redhat.com>]

Yuichi Nakamura wrote:

>When I saw the man page of pam_selinux, 
>there is a option "multiple". I think it is convenient.
>However, in pam-selinux.patch, the code about "multiple" is commented out,like this.
>+    /*    if (strcmp(argv[i], "multiple") == 0) {
>+      multiple = 1;
>+      }*/
>When I enabled it, the "multiple" option seemed to work.
>Why is it commented out ? 
>Will "multiple" option be enabled in the future?
>
>Thank you.
>
>---------
>Yuichi Nakamura
>  
>

The multiple option was added to allow the user to select the security 
context they would be allowed to login in as.  We have decided to pull 
this functionality from login programs and only allow the user to login 
with the default context.  Afterwards they can change their context 
using newrole.  I will fix the man page.

Dan


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.