+++ This bug was initially created as a clone of Bug #153711 +++ From Bugzilla Helper: User-Agent: Mozilla/5.0 (compatible; Konqueror/3.4; Linux) KHTML/3.4.0 (like Gecko) Description of problem: The below code from pam-0.78-selinux.patch has a bug. It should use ptr instead of ttybuf when reporting the error so that if the strncmp() returns zero the correct data will be used. This has been noted when su experiences sighup. + if(strncmp("/dev/", tty, 5)) { + snprintf(ttybuf,sizeof(ttybuf),"/dev/%s",tty); + ptr = ttybuf; + } + else + ptr = tty; + + if (setfilecon(ptr, context)) + { + syslog(LOG_NOTICE, + _("Warning! Could not relabel %s with %s, not relabeling.\n"), + ttybuf,context); + } Also note that in the case of a kill -1 on the sshd for a ssh login it's normal that the /dev/pts device will be gone before su notices anything has happened. So maybe ENOENT should not even be logged in this case. The URL I've given is for the fedora-selinux-list discussion of this issue. Version-Release number of selected component (if applicable): pam-0.78-5 How reproducible: Always Steps to Reproduce: Login via ssh and su to another account. Then kill -1 the sshd controlling the session. Note that su logs a message such as the following: Apr 3 11:58:51 localhost su[3659]: Warning! Could not relabel , \uffff\uff7f\u0661\uffff with user_u:object_r:devpts_t, not relabeling.
An advisory has been issued which should help the problem described in this bug report. This report is therefore being closed with a resolution of ERRATA. For more information on the solution and/or where to find the updated files, please follow the link below. You may reopen this bug report if the solution does not work for you. http://rhn.redhat.com/errata/RHBA-2006-0093.html