From: "Romix" <romix@php.cd>
To: <russell@coker.com.au>, <selinux@tycho.nsa.gov>
Subject: RE: how to add a user with rights to login via ssh on selinux?
Date: Tue, 9 Sep 2003 14:16:07 +0200 [thread overview]
Message-ID: <005901c376cc$28890460$4200000a@roadwarrior> (raw)
In-Reply-To: <200309092054.12989.russell@coker.com.au>
Hi,
> From your description it seems that you correctly added the user and
> configured your system.
>
> Does "dmesg" display any avc messages concerning the login?
yes there are some messages, but i don´t understand them (is that explained
somewhere?):
avc: denied { read } for pid=23997 exe=/usr/sbin/sshd
path=socket:[257597] dev=00:00 ino=257597
scontext=root:sysadm_r:sysadm_chkpwd_t
tcontext=root:sysadm_r:sysadm_chkpwd_t tclass=unix_stream_socket
avc: denied { write } for pid=23998 exe=/usr/sbin/sshd
path=socket:[257596] dev=00:00 ino=257596
scontext=root:sysadm_r:sysadm_chkpwd_t
tcontext=root:sysadm_r:sysadm_chkpwd_t tclass=unix_stream_socket
avc: denied { getattr } for pid=23997 exe=/usr/sbin/sshd
path=socket:[257601] dev=00:00 ino=257601
scontext=root:sysadm_r:sysadm_chkpwd_t
tcontext=root:sysadm_r:sysadm_chkpwd_t tclass=udp_socket
avc: denied { getattr } for pid=23997 exe=/usr/sbin/sshd
scontext=root:sysadm_r:sysadm_chkpwd_t tcontext=system_u:object_r:devpts_t
tclass=filesystem
avc: denied { search } for pid=23997 exe=/usr/sbin/sshd dev=00:08 ino=1
scontext=root:sysadm_r:sysadm_chkpwd_t tcontext=system_u:object_r:devpts_t
tclass=dir
> Is sshd running in the correct context? "ps --context | grep
> sshd" will show
> you the context.
23994 243 root:sysadm_r:sysadm_chkpwd_t grep sshd
is sysadm_chkpwd_t the right domain?
cu, Romain
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
next prev parent reply other threads:[~2003-09-09 12:16 UTC|newest]
Thread overview: 10+ messages / expand[flat|nested] mbox.gz Atom feed top
2003-09-09 10:15 how to add a user with rights to login via ssh on selinux? Romix
2003-09-09 10:54 ` Russell Coker
2003-09-09 12:16 ` Romix [this message]
2003-09-09 13:12 ` Russell Coker
2003-09-09 13:47 ` Romix
2003-09-09 13:53 ` Russell Coker
2003-09-09 14:47 ` Romix
2003-09-09 14:39 ` Faye Coker
2003-09-09 14:42 ` Romix
2003-09-09 15:30 ` Tom
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='005901c376cc$28890460$4200000a@roadwarrior' \
--to=romix@php.cd \
--cc=russell@coker.com.au \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.