Confined user fedora 26

[birdynam]

Hello,

after creation of a new user, i tried to confined him to user_u selinux
user.

I applied semanage -a -s user_u newuser. Then logout.

After that i can not log to any of my users from gnome and have to
reboot the workstation (under vbox).

Then the only thing i can do is to log to root and unconfined my newuser.

I was able to log into root user only if it is the first attempt to log,
ie if i tried an other user before, i have to reboot again.

No selinux avc is log.

birdynam,


Thanks,

[Lukas Vrabec]

On 08/22/2017 08:35 PM, birdynam wrote:
>  Hello,
>  
>  after creation of a new user, i tried to confined him to user_u selinux
>  user.
>  
>  I applied semanage -a -s user_u newuser. Then logout.
>  
>  After that i can not log to any of my users from gnome and have to
>  reboot the workstation (under vbox).
>  
>  Then the only thing i can do is to log to root and unconfined my newuser.
>  
>  I was able to log into root user only if it is the first attempt to log,
>  ie if i tried an other user before, i have to reboot again.
>  
>  No selinux avc is log.
>   
Hi Birdynam,

We know about this issue and I have some issues with confining users as 
staff_u. I'm working on this issue. I hope it will be fixed ASAP.

Thanks,
Lukas.

>  birdynam,
>  
>  
>  Thanks,
>  
>  
>  
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>   

-- 
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.

[birdynam]

Hi,

ok for now i found a workaround. I switch to console, log to my new
confined user, then switch to X.

This is a dirty workaround but i can test my confined user under X now.

Thanks,

[Lukas Vrabec]

On 08/23/2017 06:28 PM, birdynam wrote:
>  Hi,
>  
>  ok for now i found a workaround. I switch to console, log to my new
>  confined user, then switch to X.
>  
>  This is a dirty workaround but i can test my confined user under X now.
>   
Hi,
Following update should fix your issue:
https://bodhi.fedoraproject.org/updates/selinux-policy-3.13.1-260.6.fc26

Thanks,
Lukas.

>  Thanks,
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>   

-- 
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.

[birdynam]

Cool,

i'm in a "not connected" environment, version 259. 
Does Fedora provide a way to update to 260 packages offline ?


thanks,

Birdynam.

[Lukas Vrabec]

On 08/24/2017 09:33 PM, birdynam wrote:
>  Cool,
>  
>  i'm in a "not connected" environment, version 259.
>  Does Fedora provide a way to update to 260 packages offline ?
>  
You can download packages from koji.fedoraproject.org. Then move it to 
your system and then update.

Lukas.

>  
>  thanks,
>  
>  Birdynam.
>  _______________________________________________
>  selinux mailing list -- selinux(a)lists.fedoraproject.org
>  To unsubscribe send an email to selinux-leave(a)lists.fedoraproject.org
>   

-- 
Lukas Vrabec
Software Engineer, Security Technologies
Red Hat, Inc.

[birdynam]

Ok,i'll tried that new week.
from this web site i'll be able to update as if i were connected to the
web ? What should i donwload to be able to ?

Sorry i'm a fedora user since 5 days ;-)


thanks,

birdynam