Hello !

I have installed SElinux (included SElinux kernel options) on my openSUSE 11.1 with kernel 2.6.31.5.
I`m using the "refpolicy-2.20091117" from tresys http://oss.tresys.com/projects/refpo...ownloadRelease.

The problem I have is when I login via SSH to my system, the user context isn`t right: "id -Z" -> "context=root:sysadm_r:chkpwd_t"
and when I login locally with the same user the SElinux context is right "id -Z" -> "context=root:sysadm_r:sysadm_t" .
How can I change the SSH login context to the local login context.

Here some config options:

build.conf:
TYPE = standard
NAME = refpolicy
DIRECT_INITRC = y
MONOLITHIC = n
UBAC = y
MLS_SENS = 16
MLS_CATS = 256
MCS_CATS = 256
QUIET = n

vmware:~ # sestatus -v
SELinux status: enabled
SELinuxfs mount: /selinux
Current mode: permissive
Mode from config file: permissive
Policy version: 24
Policy from config file: refpolicy

Process contexts:
Current context: root:sysadm_r:chkpwd_t
Init context: system_u:system_r:init_t
/sbin/mingetty system_u:system_r:sysadm_t
/usr/sbin/sshd system_u:system_r:sshd_t

File contexts:
Controlling term: root:object_r:devpts_t
/etc/passwd system_u:object_r:etc_t
/etc/shadow system_u:object_r:shadow_t
/bin/bash sysadm_u:object_r:shell_exec_t
/bin/login system_u:object_r:login_exec_t
/bin/sh system_u:object_r:bin_t -> sysadm_u:object_r:shell_exec_t
/sbin/agetty system_u:object_r:getty_exec_t
/sbin/init system_u:object_r:init_exec_t
/sbin/mingetty system_u:object_r:getty_exec_t
/usr/sbin/sshd system_u:object_r:sshd_exec_t
/lib/libc.so.6 system_u:object_r:lib_t -> system_u:object_r:lib_t
/lib/ld-linux.so.2 system_u:object_r:lib_t -> system_u:object_r:ld_so_t

vmware:~ # semanage user -l
SELinux User SELinux Roles

root sysadm_r
staff_u staff_r
sysadm_u sysadm_r
system_u system_r
unconfined_u unconfined_r
user_u user_r

vmware:~ # semanage login -l
Login Name SELinux User

__default__ unconfined_u
testuser user_u
root root
seadmin sysadm_u
system_u system_u
vmware user_u

"id" command via SSH login
vmware:~ # id
uid=0(root) gid=0(root) groups=0(root) context=root:sysadm_r:chkpwd_t

"id" command to local login
vmware:~ # id
uid=0(root) gid=0(root) groups=0(root) context=root:sysadm_r:sysadm_t

Can anybody please help me ?

Regards
B.-D.