On Wed, 2005-03-30 at 06:49 -0500, Ivan Gyurdiev wrote:
> I cannot sudo:
>
> % sudo su root
> Password:
> root:system_r:unconfined_t is not a valid context
Is this in single mode by any chance... the system_r role should
be sysadm_r. In fact, single mode STILL does not login properly
in rawhide (see bugzilla).
No, for targeted policy, system_r is correct. Targeted policy
effectively has only one user identity and role (although the others are
still defined for compatibility purposes), and only uses domains to
isolate particular domains. There are no real user roles and domains
under targeted policy.
--
Stephen Smalley <sds(a)tycho.nsa.gov>
National Security Agency