Access to /root/.[rs]hosts

Paul Howarth paul at city-fan.org
Mon May 3 12:25:04 UTC 2010


On Sun, 2 May 2010 20:13:22 +0200
"Göran Uddeborg" <goeran at uddeborg.se> wrote:

> I tried to set up root ssh access between a couple of (carefully
> selected) hosts.  For root the standard /etc/hosts.equiv and
> /etc/ssh/shosts.equiv isn't recoginzed, so I created an /root/.shosts.
> 
> But it turns out that sshd isn't allowed to read this file.  The
> complete AVC:s below.  Is this an intentional restriction?  That
> hostbased root access via ssh is not allowed in the standard policy?
> Or is it a bug I could report in bugzilla?

Try labelling /root/.shosts as home_ssh_t and see if that helps.

Cheers, Paul.


More information about the selinux mailing list