[CentOS] Re: su, context(selinux?) 2nd prompt

[Maciej Żenczykowski]

>> Weird, I'm not seeing this...
>
> Are using an selinux-enabled CentOS 4.2 (or RHEL4U2) box?

Yes, an up2date Centos 4.2 box with selinux at the default targeted value.

However:
$ su -
Password:
# selinuxenabled; echo $?
0
# getenforce
Enforcing
# dmesg | grep audit
audit: initializing netlink socket (disabled)
audit(1137427005.934:1): initialized
audit(1137427089.579:2): avc:  denied  { search } for  pid=2250 
comm="syslogd" name="spool" dev=dm-2 ino=313610 
scontext=user_u:system_r:syslogd_t tcontext=system_u:object_r:var_spool_t 
tclass=dir

But I guess it's only enabled for selected daemons...
Cheers,
MaZe.