change selinux user's roles

change selinux user's roles

[toản cù]

[-- Attachment #1: Type: text/plain, Size: 707 bytes --]

Hi all!

I want to change a selinux user's role
Examble:
   Linux account: ToanCu and relation with SELinux user staff_u (staff_u
can access a number of roles staff_r, system_r, unconfiled_r, sysadm_r)
when I checked context of user by command *# id,* i have context of selinux
user :
uid=502(ToanCu) gid=503(ToanCu) groups=503(ToanCu)
*context=staff_u:staff_r:staff_t:s0-s0:c0.c1023*

I want to change the context above to : *context:
staff_u:sysadm_r:staff_t:s0-s0:c0.c1023*

Look forward your help!

Thanks!

-- 
Mr.Toan-Cu Xuan

School of Electronics and Telecommunications

Hanoi University of Science and Technology

1 Dai Co Viet, Ha noi, Viet nam.

Phone: 01656228762

Email:xuantoanbkfet@gmail.com

[-- Attachment #2: Type: text/html, Size: 2107 bytes --]

Re: change selinux user's roles

[Stephen Smalley]

On 05/27/2014 01:45 PM, toản cù wrote:
> Hi all!
> 
> I want to change a selinux user's role 
> Examble: 
>    Linux account: ToanCu and relation with SELinux user staff_u (staff_u
> can access a number of roles staff_r, system_r, unconfiled_r, sysadm_r) 
> when I checked context of user by command *# id,* i have context of
> selinux user : 
> uid=502(ToanCu) gid=503(ToanCu) groups=503(ToanCu)
> *context=staff_u:staff_r:staff_t:s0-s0:c0.c1023*
> 
> I want to change the context above to : *context:
> staff_u:sysadm_r:staff_t:s0-s0:c0.c1023*
> 
> Look forward your help!
> 
> Thanks!

newrole -r sysadm_r

or

sudo -r sysadm_r <command>

Re: change selinux user's roles

[toản cù]

[-- Attachment #1: Type: text/plain, Size: 1068 bytes --]

Thank for your suggestion! could you tell me detail! or a link relate it!


2014-05-28 0:57 GMT+07:00 Stephen Smalley <sds@tycho.nsa.gov>:

> On 05/27/2014 01:45 PM, toản cù wrote:
> > Hi all!
> >
> > I want to change a selinux user's role
> > Examble:
> >    Linux account: ToanCu and relation with SELinux user staff_u (staff_u
> > can access a number of roles staff_r, system_r, unconfiled_r, sysadm_r)
> > when I checked context of user by command *# id,* i have context of
> > selinux user :
> > uid=502(ToanCu) gid=503(ToanCu) groups=503(ToanCu)
> > *context=staff_u:staff_r:staff_t:s0-s0:c0.c1023*
> >
> > I want to change the context above to : *context:
> > staff_u:sysadm_r:staff_t:s0-s0:c0.c1023*
> >
> > Look forward your help!
> >
> > Thanks!
>
> newrole -r sysadm_r
>
> or
>
> sudo -r sysadm_r <command>
>
>


-- 
Mr.Toan-Cu Xuan

School of Electronics and Telecommunications

Hanoi University of Science and Technology

1 Dai Co Viet, Ha noi, Viet nam.

Phone: 01656228762

Email:xuantoanbkfet@gmail.com

[-- Attachment #2: Type: text/html, Size: 2198 bytes --]

Re: change selinux user's roles

[Stephen Smalley]

On 05/27/2014 02:22 PM, toản cù wrote:
> Thank for your suggestion! could you tell me detail! or a link relate it!

Run 'man newrole' to read the manual page for it, or see:
http://linux.die.net/man/1/newrole

Re: change selinux user's roles

[toản cù]

[-- Attachment #1: Type: text/plain, Size: 536 bytes --]

Thank you very much!


2014-05-28 1:32 GMT+07:00 Stephen Smalley <sds@tycho.nsa.gov>:

> On 05/27/2014 02:22 PM, toản cù wrote:
> > Thank for your suggestion! could you tell me detail! or a link relate it!
>
> Run 'man newrole' to read the manual page for it, or see:
> http://linux.die.net/man/1/newrole
>
>


-- 
Mr.Toan-Cu Xuan

School of Electronics and Telecommunications

Hanoi University of Science and Technology

1 Dai Co Viet, Ha noi, Viet nam.

Phone: 01656228762

Email:xuantoanbkfet@gmail.com

[-- Attachment #2: Type: text/html, Size: 1493 bytes --]