On Fri, 2004-04-23 at 04:20, keen@internode.on.net wrote:
> Hi, I am running the December release on a 2.6.2 kernel on a
> FC1. I have realised normal users could not change their
> finger name as well as changing password under enforcement
> mode.

I remember fixing a bug like this in the FC2 policy a few weeks ago, maybe it was also in the upstream policy. After mining my email a bit, here's the patch I came up with at the time. Not sure if you're running into the same problem, you'd need to post the exact AVC messages.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



text/x-patch attachment: chfn-policy.patch__charset_UTF-8



application/pgp-signature attachment: This is a digitally signed message part