On Wed, 2006-08-09 at 18:28 +0100, Paul Howarth wrote: > Supposing I just remove the pam_selinux from /etc/pam.d/su altogether? > Is that likely to break anything? Any other way of persuading an FC2 > system that SELinux is disabled? Removing it should be fine (and has already happened in FC5). I'm not clear on the cause though - pam_selinux returns immediately with PAM_SUCCESS if is_selinux_enabled() returns <= 0. -- Stephen Smalley National Security Agency -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list