Re: semodule

[Daniel J Walsh]

On 05/26/2009 12:10 PM, Vadym Chepkov wrote:
> > Ok While you are there please do
> >
> > ls -lZ `tty`
> >
>
>    ls -lZ `tty`
>  crw--w----  vvc tty system_u:object_r:sshd_devpts_t  /dev/pts/1
>
> > What OS Version are you using?
> >
>
>  It's Fedora 10, but it was brought to this level by series of yum upgrade since
> Fedora 5. I probably found why I am having this problem.
>
>  This is the system that has the issue:
>
>  semanage login -l
>
>  Login Name                SELinux User              MLS/MCS Range
>
>  __default__               user_u                    s0
>  root                      root                      s0-s0:c0.c1023
>  system_u                  system_u                  s0-s0:c0.c1023
>
>  This is Fedora 10 installed from DVD
>
>  semanage login -l
>
>  Login Name                SELinux User              MLS/MCS Range
>
>  __default__               unconfined_u              s0-s0:c0.c1023
>  root                      unconfined_u              s0-s0:c0.c1023
>  system_u                  system_u                  s0-s0:c0.c1023
>
>  I guess somewhere along the way login entries were not upgraded properly. I will try to
> change this first and see if it will solve the problem.
>
>  Thank you,
>  Vadym 
Yes execute

semanage login -m -s unconfined_u -r s0--s0:c0.c1023 __default__
semanage login -m -s unconfined_u -r s0--s0:c0.c1023 root

You might have to add the unconfined_u user

# semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 
unconfined_u

Upgrade from F8-F10 did not work properly.