-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Eamon Walsh wrote: > Eamon Walsh wrote: >> On a rawhide box updated this afternoon, running refpolicy trunk in >> mcs mode, I get the following after rebooting the box and logging in >> over ssh: >> >> $ id -Z >> sysadm_u:sysadm_r:system_chkpwd_t:s0 >> >> After issuing a "service sshd restart" on the box and trying again, it >> changes to: > > Should have used run_init to restart sshd. When I do this, it remains > system_chkpwd_t. Also, I'm running in permissive mode and using public > key to authenticate. > > Some searching revealed previous bug reports, most recently Sept 21: > http://archives.gentoo.org/gentoo-hardened/msg_07021.xml > > It sounds to me like sshd is not labeled correctly. Or perhaps the entire machine. What is sshd running as? -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org iD8DBQFHHdNQrlYvE4MpobMRAmNRAJ9XjTkqPfN3e18y+Ofhn4vWqg6vPwCfVMOt Wi8iSuVsdSkNvamccgS6dwc= =ksSk -----END PGP SIGNATURE----- -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
