First Attempt at root login on console always FAILS ??

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Title: First Attempt at root login on console always FAILS ??

Hi All,

I am getting an irritating problem on my Linux card (running selinux in permissive mode), that I didn’t use to see before, and am not sure whats causing it :

When I reset my Linux Card, once it boots up, and I get the login prompt, my first attempt at logging in as root on the console, ALWAYS fails ! My second attempt and afterwards ALWAYS succeeds !

unknown host login: root
password: root
Login Failure
unknown host login: root
Password: root
root@unknown host#



This didn’t used to happen before, and I am not sure what's causing it. I do know that if I disable selinux, the problem goes away !  I am guessing the problem is somewhere in between PAM and SELinux. Any suggestions on what may be causing it ?  I have versions:

checkpolicy     1.34.1
libselinux         1.34.7
libsemanage     1.10.3
libsepol            1.16.1
policycoreutils  1.34.6


Contents of  /etc/pam.d/login file
------------------------------------------------

# Begin /etc/pam.d/login
auth        required       pam_tally.so deny=3 unlock_time=300
auth        requisite      pam_securetty.so
auth        requisite      pam_nologin.so
auth        required       pam_env.so
auth        required       pam_unix.so
account     required       pam_tally.so >
account     required       pam_access.so
account     required       pam_unix.so
# pam_selinux.so close should be the first session rule
session     required       pam_selinux.so close
session     required       pam_loginuid.so
session     required       pam_motd.so
session     required       pam_limits.so
session     optional       pam_mail.so     dir=/var/mail standard
session     optional       pam_lastlog.so
session     required       pam_unix.so
# pam_selinux.so open should only be followed by sessions to be executed in the
user context
session     required       pam_selinux.so open
# End /etc/pam.d/login


[Index of Archives]     [Selinux Refpolicy]     [Linux SGX]     [Fedora Users]     [Fedora Desktop]     [Yosemite Photos]     [Yosemite Camping]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux