-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Stefan Schulze Frielinghaus wrote: > On Thu, 2007-11-08 at 15:10 -0500, Daniel J Walsh wrote: > [...] >> The avc's you are reporting above are very strange. They look like >> dovecot created a keyring, probably though pam_keyinit. And now sshd is >> trying to access it. I think you are running in permissive mode and >> your context is messed up. >> >> When you login are you getting user_t or staff_t? > > Yeah your right. There is a different. The AVCs are only generated when > I log in as a staff_t. I created a test user logged in as user_t and no > AVCs where generated. > > Hope you have more ideas because I run out of them ;-) > Well for now I would just ignore or dontaudit them. Since I believe nothing used keyrings and the way it is setup in pam is all wrong right now. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHNJPSrlYvE4MpobMRAtwOAJ4lVduXNjmMGp+BD+/sO1b2H66GIgCg46rN 7b1lN9q9nynOZwCa6+4LUJI= =mlVE -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
