Skip top menus
National Security Agency and Central Security Service with agency logos.NSA/CSS Memorial Wall
Home    About NSA    Research    Business    Careers    Public Info    History
Introduction to Research    Security-Enhanced Linux    Information Assurance Research    Technology Transfer    Publications    Related Links

>>SELinux Mailing List: by thread

Search
What's new?
Contents
Overview
What's New
Frequently Asked Questions
Background
Documentation
License
Download
Participating
Mail List
Archive Summary
Archive by Thread
Archive by Author
Archive by Date
Archive by Subject
Remaining Work
Contributors
Related Work
Press Releases
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]
From: Stephen Smalley <sds_at_tislabs.com>
subject: Re: Slackware
Date: Mon, 2 Jul 2001 08:50:32 -0400 (EDT)
  • This message: [ Message body ]
  • Next message: Stephen Smalley: "Re: checkpolicy fails"
  • Previous message: Stephen Smalley: "Re: PAM"
  • In reply to: cslater_at_wcnet.org: "Re: Slackware"

On Wed, 27 Jun 2001 cslater@wcnet.org wrote:

> I tried it on slackware. I also killed my box flat dead. SELinux as far as i
> can tell requires PAM. PAM Kills slackware. Do not use PAM and slackware. I
> tried. Gave errors when you tried to login, refused to let you login. I
> reformated and reinstalled. Ive been talking to people cin the forum and they
> say that they are not going to support PAM till it becomes more developed and
> mature. They say that there are too many security problems at the moment, and
> that it requires a entire rebuild of most of the a1 and possible n1 series. I
> would generaly stay away from SELinux.

You should be able to work around this problem simply by disabling PAM in the util-linux MCONFIG before building the modified login program. SELinux itself doesn't depend on PAM, but the modified login program provided in the SELinux distribution is configured with PAM enabled by default, because we're using RedHat, and RedHat uses PAM.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com





--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
  • Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ]

This archive was generated by hypermail 2.2.0 on Wed 11 Jun 2008 - 08:10:54 EDT

Information Assurance | Signals & Intelligence        Links | Accessibility | Privacy & Security