issue with SE/Linux - sshd not giving access to /dev/pts/[n]

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

hi there,

i have an issue on my newly created Debian/SELinux/unstable system.

i have pam 0.77 se1 installed
ssh            3.8.1p1-4      (OpenSSH)
and libselinux1 1.12-1.

i can log in as root, fine.

but i cannot log in as an ordinary user, and i had to grant
special permission to the _user_ process (NOT sshd or pam
before a setuid and exec is carried out) to access
/dev/pts/0.

in other words, if i understand this correctly, there is a
bug somewhere in either sshd or pam where control of the
tty is given at the wrong point, or is not given at all.

(russell talks of relabelling the tty, i'm not sure what that
would involve.)

... except if the user is root :) :) whereupon magically
it works fiine :)

okay, so does anyone on the openssh or pam lists understand
what this might about?  does it ring any bells?

l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.