On Wed, 2006-08-09 at 18:28 +0100, Paul Howarth wrote:
Supposing I just remove the pam_selinux from /etc/pam.d/su
altogether?
Is that likely to break anything? Any other way of persuading an FC2
system that SELinux is disabled?
Removing it should be fine (and has already happened in FC5). I'm not
clear on the cause though - pam_selinux returns immediately with
PAM_SUCCESS if is_selinux_enabled() returns <= 0.
--
Stephen Smalley
National Security Agency