Can't tell you how to enable it for SSH only. I guess you'll need to edit the policy for that.
But in general you should be able to control ps's behavior using an SELinux boolean.
Look through "getsebool -a", you should be able to find it.
Sent from my HTC
----- Reply message -----
From: "Guido Trentalancia" <guido@xxxxxxxxxxxxxxxx>
Date: Sun, Jun 13, 2010 07:36
Subject: Display all processes using ps
To: <selinux@xxxxxxxxxxxxx>
Hello everybody !
I am logging as root on a remote MLS machine using ssh so the default
role is staff_r. However, I need to execute ps (to display all system
processes, "ps -ax") over ssh. Unfortunately, ps does not show all
processes that are normally displayed when using the sysadm_r role
because it runs in the staff_r role.
What would be the safest way to allow ps over ssh to show all processes
running on the system ?
Thanks for your help.
Guido
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.
