pam_mount needs proper labeling. Tested on Fedora 8
--- /usr/src/refpolicy-20071214/policy/modules/system/authlogin.fc 2007-12-12 16:55:21.000000000 +0100 +++ policy/modules/system/authlogin.fc 2008-02-01 21:40:10.000000000 +0100 @@ -40,5 +40,5 @@ /var/log/wtmp.* -- gen_context(system_u:object_r:wtmp_t,s0) /var/run/console(/.*)? gen_context(system_u:object_r:pam_var_console_t,s0) - +/var/run/pam_mount(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0) /var/run/sudo(/.*)? gen_context(system_u:object_r:pam_var_run_t,s0)
