Re: semodule

[Daniel J Walsh <dwalsh redhat com>]

On 05/26/2009 12:10 PM, Vadym Chepkov wrote:
> > Ok While you are there please do
> >
> > ls -lZ `tty`
>
>   ls -lZ `tty`
> crw--w----  vvc tty system_u:object_r:sshd_devpts_t  /dev/pts/1
>
> > What OS Version are you using?
>
> It's Fedora 10, but it was brought to this level by series of yum upgrade since Fedora 5. I probably found why I am having this problem.
>
> This is the system that has the issue:
>
> semanage login -l
>
> Login Name                SELinux User              MLS/MCS Range
>
> __default__               user_u                    s0
> root                      root                      s0-s0:c0.c1023
> system_u                  system_u                  s0-s0:c0.c1023
>
> This is Fedora 10 installed from DVD
>
> semanage login -l
>
> Login Name                SELinux User              MLS/MCS Range
>
> __default__               unconfined_u              s0-s0:c0.c1023
> root                      unconfined_u              s0-s0:c0.c1023
> system_u                  system_u                  s0-s0:c0.c1023
>
> I guess somewhere along the way login entries were not upgraded properly. I will try to change this first and see if it will solve the problem.
>
> Thank you,
> Vadym
Yes execute

semanage login -m -s unconfined_u -r s0--s0:c0.c1023 __default__
semanage login -m -s unconfined_u -r s0--s0:c0.c1023 root

You might have to add the unconfined_u user

# semanage user -a -P user -R "unconfined_r system_r" -r s0-s0:c0.c1023 
unconfined_u

Upgrade from F8-F10 did not work properly.