Selinux warning?

[Daniel J Walsh]

Tom Diehl wrote:
> Hi all,
>
> I have an EL4 box that every time I do su - vmail I get the following warnings
> in the log:
>
> Dec 31 12:25:22 roger su(pam_unix)[2055]: session opened for user vmail by root(uid=0)
> Dec 31 12:25:22 roger su[2055]: Warning!  Could not relabel /dev/pts/3 with user_u:object_r:initrc_devpts_t, not relabeling.Operation not permitted
>
> This started after I changed the UID in /etc/passwd and the gid in /etc/group.
>
> (roger pts4) # ll -Z /dev/pts/3
> crw-------  root     tty      root:object_r:initrc_devpts_t    /dev/pts/3
> (roger pts4) #
>
> Is there something that needs to be done for selinux when I change a u/gid??
>
> Regards,
>
> Tom Diehl		tdiehl at rogueind.com		Spamtrap address mtd123 at rogueind.com
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-lis
>   
Not sure why your tty is labeled initrc_devpts_t.   You could try to 
remove pam_selinux.so lines from your /etc/pam.d/su file and this should 
work fine.

--