Package: selinux-basics
Version: 0.3.5
Severity: normal

Since I upgraded from login 1:4.1.3.1-1 to 1:4.1.4.1-1, in the file
/etc/pam.d/login the line
>  session required pam_selinux.so select_context

Is replaced by two lines:
>  session [success=ok ignore=ignore module_unknown=ignore \
>          default=bad] pam_selinux.so close
>
>  session [success=ok ignore=ignore module_unknown=ignore \
>          default=bad] pam_selinux.so open

The test in check-selinux-installation return a false positive:
  "/etc/pam.d/login is not SELinux enabled"

also, select_context isn't enabled by default (I am not sure it is a
problem)

Regards,

Franklin

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing'), (200, 'unstable')
Architecture: i386 (i686)

Kernel: Linux 2.6.29-2-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages selinux-basics depends on:
ii  checkpolicy                   2.0.16-3   SELinux policy compiler
ii  policycoreutils               2.0.55-1   SELinux core policy utilities
ii  python                        2.5.4-2    An interactive high-level object-o
ii  selinux-utils                 2.0.71-1   SELinux utility programs

Versions of packages selinux-basics recommends:
ii  selinux-policy-default  2:0.0.20080702-6 Strict and Targeted variants of th
ii  setools                 3.3.5.ds-5       tools for Security Enhanced Linux 

Versions of packages selinux-basics suggests:
pn  logcheck                      <none>     (no description available)
pn  syslog-summary                <none>     (no description available)

-- no debconf information



-- 
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]

Reply via email to