Preventing getting SELinux status information in RHEL 6.x

[Maurizio Pagani Gmail]

Good Morning everybody,

 

This is my first question on this mailing-list.

 

I'm a beginner and i'm studing how deploy some policy with SELinux on RHEL
5.x/6.x.

Now, while I'm writing a restricted role, I would that a restricted user can
not getting SELinux information status.

 

For example, Now I have this context:

 



 

Instead, I want that my  restricted user (ssh_test), can see when I type
"sestatus":

 

Disabled

 

And when I type "id -Z", must not getting information about its "id
context".

 

I know that it is possible on Fedora, so, is it possible also in RHEL
5.x/6.x???

 

Thanks in advance.

 

###################################

Maurizio Pagani

RedHat Certified Engineer

IBM Certified System Administrator AIX 7

NickName: LordFire (I'm also on #selinux)

 

 

 

 

how can i prevent restricted users from getting selinux status information
in rhel6"

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20130211/c5aec8d0/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: image001.png
Type: image/png
Size: 11137 bytes
Desc: not available
URL: <http://lists.fedoraproject.org/pipermail/selinux/attachments/20130211/c5aec8d0/attachment.png>