on a rhel5 system ive setup the pam_namspace.conf with poly-instantiated directories example for a particular user.
when i later try to assign that user to a multi category security level, sealert throws a message and the user can no longer login:
May 27 19:14:21 computer1 sshd[5909]: pam_namespace(sshd:session): Error setting context of /tmp/tmp-inst/system_u:object_r:tmp_t:s0-Unclassified_johnd to system_u:object_r:tmp_t:s0-Unclassified
Raw Audit Messages
avc: denied { relabelto } for comm="sshd" dev=dm-3 egid=0 euid=0
exe="/usr/sbin/sshd" exit=-13 fsgid=0 fsuid=0 gid=0 items=0
name="system_u:object_r:tmp_t:s0-Unclassified_johnd" pid=5909
scontext=user_u:system_r:unconfined_t:s0-s0:c0.c1023 sgid=0
subj=user_u:system_r:unconfined_t:s0-s0:c0.c1023 suid=0 tclass=dir
tcontext=system_u:object_r:tmp_t:s0-s0:c2 tty=(none) uid=0
is pam_namespace known to have issues with multi category security or what am i missing?