AW: [rsbac] Problem with /bin/login

Toggweiler Stephan rsbac@rsbac.org
Mon May 6 11:11:01 2002


Thank you it works now.

When I login as root (on the console or ssh) the role will not be =
changed to
System_Admin, is that the problem that there is no real setuid() when =
you
login as root?

I have now disallowed root to login vom console or per ssh, and su from
secoff to get root privileges.

-Stephan

> -----Urspr=FCngliche Nachricht-----
> Von:	Martin Tomasek [SMTP:mtd@mk.cvut.cz]
> Gesendet am:	Freitag, 3. Mai 2002 12:54
> An:	rsbac@rsbac.org
> Betreff:	Re: [rsbac] Problem with /bin/login
>=20
> > When I startup with the RSBAC kernel I can login as root or secoff =
but
> with
> > both login the role are alloways Auth_User and not System_Admin or
> > Role_Admin. How can I setup the attributes that /bin/login change =
the
> role
> > to the user where /bin/login setuid to.
>=20
> use rc_initial_role instead of rc_force_role.
>=20
> run "rsbac_fd_menu /bin/login", access rights can be set through this
> menu interface and it have help too. you can look for explanation of
> difference between initial and forced role there.
>=20
> --=20
> Martin Tomasek, mtd@email.cz
> BOFH excuse #171:
> NOTICE: alloc: /dev/null: filesystem full
>=20
>=20
>>> Rentenanstalt/Swiss Life - Official Partner Expo.02 <<<