On Fri, 2004-06-18 at 15:00, Tom London wrote: > Running off of the development tree, I couldn't get graphical apps (like > up2date, seaudit, ...) working when su'ed as root. All of this works > fine on a 'stock FC2' machine (running off > of the base and released-updates trees). Try moving the 'pam_selinux.so open multiple' line before the 'pam_xauth.so' line in /etc/pam.d/su. Dan, this is necessary under the current policy to get xauth to run with the right permissions for the new domain. -- Stephen Smalley <sds@xxxxxxxxxxxxxx> National Security Agency