This is a discussion on how to ad a user with rights to login via ssh on selinux? within the Linux Security forums, part of the System Security and Security Related category; Hi, im running selinux und want to create a user that has the right to login via ssh. i created ...
|
|||||||
| FAQ | Members List | Calendar | Search | Today's Posts | Mark Forums Read |
|
|||
|
Hi,
im running selinux und want to create a user that has the right to login via ssh. i created a user called setest: # suseradd -m setest i gave him a password: # sadminpasswd setest .... i added the line "user setest roles { user_r sysadm_r };" to /etc/security/selinux/src/policy/users i applied the changes: # make -C /etc/security/selinux/src/policy load and my /etc/security/default_contexts looks like this: system_r:local_login_t staff_r:staff_t user_r:user_t system_r:sshd_t staff_r:staff_t user_r:user_t system_r:crond_t staff_r:staff_crond_t user_r:user_crond_t system_r:system_crond_t if i right understand this should be enough, but my user setest can´t login, after typing in the password i get the message: Connection to 10.0.0.11 closed by remote host. Connection to 10.0.0.11 closed. in the sshd-log i have the following lines: Sep 8 20:45:17 [sshd] Accepted password for setest from 10.0.0.23 port 33571 ssh2 Sep 8 20:45:17 [sshd] fatal: Could not obtain SID for user setest Sep 8 20:45:17 [sshd] syslogin_perform_logout: logout() returned an error what did i forgot or what do i wrong? can someone help me? thx. cu, Roman |