RE: /etc/passwd labeling issues

Hello,

I would recommend using the wrapper because it can be generic in case of other issues like this, at least until the main problem is solved.

Ed

-----Original Message-----
From: Stephen Smalley [mailto:sds@epoch.ncsc.mil] Sent: Tuesday, April 27, 2004 11:42 AM
To: Russell Coker
Cc: Ed Street; Selinux
Subject: Re: /etc/passwd labeling issues

On Mon, 2004-04-26 at 23:25, Russell Coker wrote:
> On Tue, 27 Apr 2004 08:44, "Ed Street" <edstreet@street-tek.com> wrote:
> > So we have 2 choices for our debian users. A) Change the password,
change
>
> No, we have only one realistic choice. To fix PAM and make it work
correctly
> as it does in Fedora.

Or use the wrapper-based approach of the older SELinux, i.e. spasswd and friends.

As I recall, Fedora includes more than just a modified pam for this purpose; it also required modifications to libuser, shadow-utils, and components of util-linux to preserve contexts on /etc/passwd and /etc/shadow.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.667 / Virus Database: 429 - Release Date: 4/23/2004
 

---

Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.670 / Virus Database: 432 - Release Date: 4/27/2004
 


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.