With the new package from jaunty "both" was changed to "level",
anyways I followed this to have it running successful:
http://www.ibm.com/developerworks/linux/library/l-polyinstantiation/index.html

there documentation doesn't have anything with "level", so here is what I have 
in
/etc/security/namespace.conf

/tmp     /tmp-inst/             level   myname   root,adm
/var/tmp /var/tmp/tmp-inst/     level   myname   root,adm
$HOME    $HOME/$USER.inst/     level    myname

just make sure you mkdir /tmp/tmp-inst 
and chmod accordingly, and add the entry in login.
(session required pam_namespace.so ignore_config_error debug)
the debug option should reveal more in:
 /var/log/auth.log 
the finished results(hopefully this is right) should
look like this:

 login[2577]: pam_unix(login:session): session opened for user myname by 
LOGIN(uid=0)
 login[2577]: pam_selinux(login:session): pam: 
default-context=myname:sysadm_r:sysadm_t:s0-s0:c0.c255 
selected-context=myname:sysadm_r:sysadm_t:s0-s0:c0.c255 success 1
 login[2577]: pam_namespace(login:session): open_session - start
 login[2577]: pam_namespace(login:session): Parsing config file 
/etc/security/namespace.conf
 login[2577]: pam_namespace(login:session): Expanded polydir: '/tmp'
 login[2577]: pam_namespace(login:session): Expanded ruser polydir: '/tmp'
 login[2577]: pam_namespace(login:session): Expanded instance prefix: 
'/tmp-inst/'
 login[2577]: pam_namespace(login:session): Expanded polydir: '/var/tmp'
 login[2577]: pam_namespace(login:session): Expanded ruser polydir: '/var/tmp'
 login[2577]: pam_namespace(login:session): Expanded instance prefix: 
'/var/tmp/tmp-inst/'
 login[2577]: pam_namespace(login:session): Expanded polydir: '/home/myname'
 login[2577]: pam_namespace(login:session): Expanded ruser polydir: '/root'
 login[2577]: pam_namespace(login:session): Expanded instance prefix: 
'/home/myname/myname.inst/'
 login[2577]: pam_namespace(login:session): Configured poly dirs:
 login[2577]: pam_namespace(login:session): dir='/tmp' iprefix='/tmp-inst/' 
meth=3
 login[2577]: pam_namespace(login:session): override user 1000 
 login[2577]: pam_namespace(login:session): dir='/var/tmp' 
iprefix='/var/tmp/tmp-inst/' meth=3
 login[2577]: pam_namespace(login:session): override user 1000 
 login[2577]: pam_namespace(login:session): dir='/home/myname' 
iprefix='/home/myname/myname.inst/' meth=3
 login[2577]: pam_namespace(login:session): override user 1000 
 login[2577]: pam_namespace(login:session): Set up namespace for pid 2577
 login[2577]: pam_namespace(login:session): Checking for ns override in dir 
/tmp for uid 1000
 login[2577]: pam_namespace(login:session): Overriding poly for user 1000 for 
dir /tmp
 login[2577]: pam_namespace(login:session): Checking for ns override in dir 
/var/tmp for uid 1000
 login[2577]: pam_namespace(login:session): Overriding poly for user 1000 for 
dir /var/tmp
 login[2577]: pam_namespace(login:session): Checking for ns override in dir 
/home/myname for uid 1000
 login[2577]: pam_namespace(login:session): Overriding poly for user 1000 for 
dir /home/myname
 login[2577]: pam_namespace(login:session): namespace setup ok for pid 2577

hope this helps;

regards;

Justin P. Mattock

-- 
Segfault with pam_namespace
https://bugs.launchpad.net/bugs/247125
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to