Re: [gentoo-hardened] sshd not working in enforcing mode

[Chris PeBenito]

On Wed, 2004-02-25 at 08:47, Michael Ihde wrote:
> > So is there anything I can do about this error message? E.g. can I
> > adjust the access rights somehow to make it accessible for the source
> > countext? (I repeat I'm new to SELinux so please tell me if I'm saying
> > something stupid.)
>
> Yes! In /etc/security/selinux/src/policy/domains/misc/ add a file
> local.te
>
> In this file you can define all your local security policies.   Add the
> line:
>
> allow { sshd_t } sysadm_tty_device_t:chr_file { read write };

No.  You almost certainly don't want sshd to be able to read from
sysadm's terminal.  Most likely sshd was just printing something to the
terminal, so this can be dontaudit'ed.

-- 
Chris PeBenito
<pebenito@g.o>
Developer,
Hardened Gentoo Linux
Embedded Gentoo Linux
 
Public Key: http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xE6AF9243
Key fingerprint = B0E6 877A 883F A57A 8E6A  CB00 BC8E E42D E6AF 9243