I'm running Sun Grid Engine on a CentOS 5 cluster and am having trouble
with SELinux preventing the proper setup of parallel environments.
Turning SELinux off allows everything to work properly.
The problem seems to be when SGE tries to use ssh to login to a remote
machine. As part of this process, it starts up a private sshd daemon to
handle the connection. The relevant error appears to be:
type=USER_LOGIN msg=audit(1186001097.981:19489): user pid=12066 uid=0
auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='acct=steph:
exe="/usr/sbin/sshd" (hostname=?, addr=192.168.0.120, terminal=sshd
res=failed)'
type=USER_ROLE_CHANGE msg=audit(1186001098.201:19491): user pid=12066
uid=0 auid=0 subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='sshd:
default-context=user_u:system_r:unconfined_t:s0
selected-context=user_u:system_r:unconfined_t:s0-s0:c0.c1023:
exe="/usr/sbin/sshd" (hostname=?, addr=?, terminal=? res=failed)'
sshd reports:
Aug 1 14:44:58 coop00 sshd[12066]: error: deny MLS level
SystemLow-SystemHigh (user range s0). Continuing in permissive mode
I'm at a loss here. Can anyone explain what is going on and what is
failing? How can I make it work without running in permissive mode?
Thanks!
--
Orion Poplawski
Technical Manager 303-415-9701 x222
NWRA/CoRA Division FAX: 303-415-9702
3380 Mitchell Lane orion@xxxxxxxxxxxxx
Boulder, CO 80301 http://www.cora.nwra.com
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
