I'm trying to set up polyinstantiation of the /tmp directory using RHEL5. The /etc/security/namespace.conf file shows the following line as needing to be uncommented out: /tmp /tmp-inst/ level root,adm The /usr/share/doc/pam-0.99.6.2/txts/README.pam_namespace file describes the format of the /etc/security/namespace.conf file, and the allowable values. For the <method> entry it lists the following valid values: "user", "context", "both". It doesn't list "level" as a valid value. However, "level" is the only value that I can get to work. With "user", "context", or "both", I get the following error when I attempt to use newrole to change the level of my shell: "pam_open_session failed with Cannot make/remove an entry for the specified session" Any ideas as to why? And what other values are valid other than "level" Thanks -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
