fedora-selinux May 2010 archive
Main Archive Page > Month Archives  > fedora-selinux archives
fedora-selinux: Re: Access to /root/.[rs]hosts

Re: Access to /root/.[rs]hosts

From: Paul Howarth <paul_at_nospam>
Date: Mon May 03 2010 - 12:25:04 GMT
To: "Göran Uddeborg" <goeran@uddeborg.se>

On Sun, 2 May 2010 20:13:22 +0200
"Göran Uddeborg" <goeran@uddeborg.se> wrote:

> I tried to set up root ssh access between a couple of (carefully
> selected) hosts. For root the standard /etc/hosts.equiv and
> /etc/ssh/shosts.equiv isn't recoginzed, so I created an /root/.shosts.
>
> But it turns out that sshd isn't allowed to read this file. The
> complete AVC:s below. Is this an intentional restriction? That
> hostbased root access via ssh is not allowed in the standard policy?
> Or is it a bug I could report in bugzilla?

Try labelling /root/.shosts as home_ssh_t and see if that helps.

Cheers, Paul.
-- selinux mailing list selinux@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/selinux