On Tue, Jun 21, 2005 at 04:31:28AM -0700, you [Steve G] wrote: > > >recvfrom(3, "$\0\0\0\2\0\0\0\1\0\0\0\311_\0\0\352\377\377\377|\0\0\0"..., 8476, > > This is your problem. 352 is octal for -EINVAL. Your kernel doesn't > understand the netlink message type that the audit-libs is sending. I put > audit-libs-0.9.10 into rawhide and it should be available next time its > pushed out. If you feel like building it yourself, you can get it from > people.redhat.com/sgrubb/audit Ok, I built audit-libs-0.9.10-1.i386.rpm and gave it a try: --8<----------------------------------------------------------------------- root@babbage:/var/cache/yum/development/packages>rpm -Fvh audit-libs-0.9.10-1.i386.rpm pam-0.79-10.i386.rpm pam-devel-0.79-10.i386.rpm Preparing... ########################################### [100%] 1:audit-libs ########################################### [ 33%] /sbin/ldconfig: /lib/libselinux.so.1 is not a symbolic link 2:pam ########################################### [ 67%] /sbin/ldconfig: /lib/libselinux.so.1 is not a symbolic link 3:pam-devel ########################################### [100%] root@babbage:/var/cache/yum/development/packages>su root@babbage:/var/cache/yum/development/packages> --8<----------------------------------------------------------------------- Seems to work. I can also su from normal user to root. Thanks! -- v -- v@xxxxxx