You would want to setup root as sysadm_u not staff_u.
You should use sudo to change roles not su.
If you can not login as a non root user then you probably have a
labeling issue.
restorecon -R -v -F /home
On 12/20/2016 01:30 PM, Naina Emmanuel
wrote:
Good morning sir,
I have questions about my finding....
Working on SELinux centos 7 (enforcing mode). I
don't want any unconfined_t label on my system, so I have
confined my root and my users through
# /usr/sbin/semanage login -a -s staff_u root
#
/usr/sbin/semanage login -a -s staff_u test
Q: In enforcing
mode I could switch user(su) but I am not able to ssh or
login to root or any user that I am confining, it gives
permission denied error?
Same is the
case when I am confining in staff_u or sysadm_u domain
Please help in
this regard
Thanks
|
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.