Gentoo Archives: gentoo-hardened

From: Antoine Martin <antoine@××××××××××.uk>
To: gentoo-hardened@l.g.o
Subject: Re: [gentoo-hardened] newrole -r selinux problem
Date: Fri, 22 Sep 2006 16:10:06
Message-Id: 1158942619.2609.19.camel@ant.internal
In Reply to: Re: [gentoo-hardened] newrole -r selinux problem by stanke
1 > >> The policy does not allow a role transition from user_r to sysadm_r.
2 > >> So thats why su can't work.
3 > >>
4 > > The solution in this case is to make sure that when you login as root
5 > > you get into sysadm_u:sysadm_r:sysadm_t or another context which does
6 > > allow the transition to sysadm. Setting the default for ssh is fairly
7 > > well documented.
8 > Thanks for help could you please send me some link for manuals, i google
9 > it (probably wrong) but i didn't found nothing usefull.
10 /etc/security/default_contexts
11 is what you're looking for.
12
13 Antoine
14
15 --
16 gentoo-hardened@g.o mailing list

Replies

Subject Author
Re: [gentoo-hardened] newrole -r selinux problem stanke <stanke@×××××××.eu>