http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- Summary|pam_selinux.so missing in |SELinux: pam_selinux.so |/etc/pam.d/{login,gdm,xdm,s |missing in |shd} in order for the |/etc/pam.d/{login,gdm,xdm,s |correct login type/role |shd} in order for the | |correct login type/role -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c1 Pavol Rusnak changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |alan@rouses.net, | |mc@novell.com, | |prusnak@novell.com --- Comment #1 from Pavol Rusnak 2010-03-11 16:52:56 CET --- I think you have to call: pam-config -d --apparmor pam-config -a --selinux (first to disable apparmor, because it it not compatible with selinux. second to enable selinux in /etc/pam.d/* config files). Michael: Could you please confirm this? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c3 --- Comment #3 from Alan Rouse 2010-03-11 16:54:36 UTC --- To boot with selinux you enter the kernel boot parameters: "security=selinux selinux=1 enforcing=0" When you do that, apparmor is not started during boot (you get console messages to this effect) and selinux is started, and works. The problem is that if you use autologin we are currently not setting the selinux context correctly. If you do a manual login, it is set correctly. So my question is, how does automatic login work under OpenSUSE? Instead of /etc/pam.d/login, what alternative path is used for automatic login? -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c5 --- Comment #5 from Justin mattock 2010-03-11 19:45:15 UTC --- o.k. heres what I get: sudo /usr/sbin/pam-config -d --apparmor File /etc/pam.d/common-auth is no symlink to /etc/pam.d/common-auth-pc. New config from /etc/pam.d/common-auth-pc is is not in use! a simple: sudo ln -svf common-auth-pc common-auth fixes this for me, then running the above command,as well as the other gives no complaints. as for logging into the chosen role, this works(thanks!!). in regards to autologin I'm guessing must have been something with what I had instead of pam_selinux.so being in common-session created by pam-config. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c Thomas Biege changed: What |Removed |Added ---------------------------------------------------------------------------- AssignedTo|security-team@suse.de |thomas@novell.com -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

http://bugzilla.novell.com/show_bug.cgi?id=582366 http://bugzilla.novell.com/show_bug.cgi?id=582366#c7 --- Comment #7 from Justin mattock 2010-04-08 17:27:19 UTC --- o.k. looks good. -- Configure bugmail: http://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.