[Bug 1163020] New: security:SELinux/selinux-policy: newrole: incorrect password for root
http://bugzilla.opensuse.org/show_bug.cgi?id=1163020 Bug ID: 1163020 Summary: security:SELinux/selinux-policy: newrole: incorrect password for root Classification: openSUSE Product: openSUSE.org Version: unspecified Hardware: Other OS: Linux Status: NEW Severity: Critical Priority: P5 - None Component: 3rd party software Assignee: jsegitz@suse.com Reporter: gigi206+suse@gmail.com QA Contact: bnc-team-screening@forge.provo.novell.com Found By: --- Blocker: --- $ pam-config -a --selinux $ semanage login -m -r s0-s0:c0.c1023 -s root root $ semanage user -l Étiquetage MLS/ MLS/ Identité SELinux Préfixe Niveau MCS Intervalle MCS Rôles SELinux guest_u user s0 s0 guest_r root user s0 s0-s0:c0.c1023 staff_r sysadm_r system_r unconfined_r staff_u user s0 s0-s0:c0.c1023 staff_r sysadm_r system_r unconfined_r sysadm_u user s0 s0-s0:c0.c1023 sysadm_r system_u user s0 s0-s0:c0.c1023 system_r unconfined_r unconfined_u user s0 s0-s0:c0.c1023 system_r unconfined_r user_u user s0 s0 user_r xguest_u user s0 s0 xguest_r $ semanage login -l Nom pour l'ouverture de session Identité SELinux Intervalle MLS/MCS Service __default__ user_u s0 * root root s0-s0:c0.c1023 * $ id -Z root:staff_r:staff_t:s0-s0:c0.c1023 $ LC_ALL=C newrole -r sysadm_r newrole: incorrect password for root -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1163020 http://bugzilla.opensuse.org/show_bug.cgi?id=1163020#c1 --- Comment #1 from Ghislain LE MEUR <gigi206+suse@gmail.com> --- OS: openSUSE Leap 15.1 zypper se -sd selinux Chargement des données du dépôt... Lecture des paquets installés... S | Nom | Type | Version | Architecture | Dépôt ---+---------------------------+---------------+-----------------+--------------+------------------------------- i | checkpolicy | paquet | 2.9-55.1 | x86_64 | selinux v | checkpolicy | paquet | 2.8-lp151.2.1 | x86_64 | openSUSE-Leap-15.1-1 v | checkpolicy | paquet | 2.8-lp151.2.1 | x86_64 | Dépôt principal | checkpolicy | paquet source | 2.9-55.1 | noarch | selinux | libselinux | paquet source | 2.9-138.1 | noarch | selinux | libselinux-bindings | paquet source | 2.9-149.1 | noarch | selinux i | libselinux-devel | paquet | 2.9-138.1 | x86_64 | selinux v | libselinux-devel | paquet | 2.8-lp151.1.30 | x86_64 | openSUSE-Leap-15.1-1 v | libselinux-devel | paquet | 2.8-lp151.1.30 | x86_64 | Dépôt principal | libselinux-devel-static | paquet | 2.9-138.1 | x86_64 | selinux | libselinux-devel-static | paquet | 2.8-lp151.1.30 | x86_64 | openSUSE-Leap-15.1-1 | libselinux-devel-static | paquet | 2.8-lp151.1.30 | x86_64 | Dépôt principal i | libselinux1 | paquet | 2.9-138.1 | x86_64 | selinux v | libselinux1 | paquet | 2.8-lp151.1.30 | x86_64 | openSUSE-Leap-15.1-1 v | libselinux1 | paquet | 2.8-lp151.1.30 | x86_64 | Dépôt principal | libselinux1-32bit | paquet | 2.8-lp151.1.30 | x86_64 | openSUSE-Leap-15.1-1 | libselinux1-32bit | paquet | 2.8-lp151.1.30 | x86_64 | Dépôt principal | libsemanage | paquet source | 2.9-86.5 | noarch | selinux i+ | libsemanage-devel | paquet | 2.9-86.5 | x86_64 | selinux v | libsemanage-devel | paquet | 2.8-lp151.1.32 | x86_64 | openSUSE-Leap-15.1-1 v | libsemanage-devel | paquet | 2.8-lp151.1.32 | x86_64 | Dépôt principal i+ | libsemanage-devel-static | paquet | 2.9-86.5 | x86_64 | selinux v | libsemanage-devel-static | paquet | 2.8-lp151.1.32 | x86_64 | openSUSE-Leap-15.1-1 v | libsemanage-devel-static | paquet | 2.8-lp151.1.32 | x86_64 | Dépôt principal | libsemanage-migrate-store | paquet | 2.9-86.5 | x86_64 | selinux | libsemanage-migrate-store | paquet | 2.8-lp151.1.32 | x86_64 | openSUSE-Leap-15.1-1 | libsemanage-migrate-store | paquet | 2.8-lp151.1.32 | x86_64 | Dépôt principal i | libsemanage1 | paquet | 2.9-86.5 | x86_64 | selinux v | libsemanage1 | paquet | 2.8-lp151.1.32 | x86_64 | openSUSE-Leap-15.1-1 v | libsemanage1 | paquet | 2.8-lp151.1.32 | x86_64 | Dépôt principal | libsemanage1-32bit | paquet | 2.8-lp151.1.32 | x86_64 | openSUSE-Leap-15.1-1 | libsemanage1-32bit | paquet | 2.8-lp151.1.32 | x86_64 | Dépôt principal | libsepol | paquet source | 2.9-82.1 | noarch | selinux i | libsepol-devel | paquet | 2.9-82.1 | x86_64 | selinux v | libsepol-devel | paquet | 2.8-lp151.1.36 | x86_64 | openSUSE-Leap-15.1-1 v | libsepol-devel | paquet | 2.8-lp151.1.36 | x86_64 | Dépôt principal | libsepol-devel-static | paquet | 2.9-82.1 | x86_64 | selinux | libsepol-devel-static | paquet | 2.8-lp151.1.36 | x86_64 | openSUSE-Leap-15.1-1 | libsepol-devel-static | paquet | 2.8-lp151.1.36 | x86_64 | Dépôt principal i+ | libsepol-utils | paquet | 2.9-82.1 | x86_64 | selinux v | libsepol-utils | paquet | 2.8-lp151.1.36 | x86_64 | openSUSE-Leap-15.1-1 v | libsepol-utils | paquet | 2.8-lp151.1.36 | x86_64 | Dépôt principal i | libsepol1 | paquet | 2.9-82.1 | x86_64 | selinux v | libsepol1 | paquet | 2.8-lp151.1.36 | x86_64 | openSUSE-Leap-15.1-1 v | libsepol1 | paquet | 2.8-lp151.1.36 | x86_64 | Dépôt principal | libsepol1-32bit | paquet | 2.8-lp151.1.36 | x86_64 | openSUSE-Leap-15.1-1 | libsepol1-32bit | paquet | 2.8-lp151.1.36 | x86_64 | Dépôt principal | mcstrans | paquet | 2.9-45.4 | x86_64 | selinux | mcstrans | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 | mcstrans | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal | mcstrans | paquet source | 2.9-45.4 | noarch | selinux i+ | openSUSE-2019-1479 | correctif | 1 | noarch | Dépôt principal de mise à jour v | openSUSE-2020-111 | correctif | 1 | noarch | Dépôt principal de mise à jour i | policycoreutils | paquet | 2.9-143.1 | x86_64 | selinux v | policycoreutils | paquet | 2.8-lp151.3.1 | x86_64 | openSUSE-Leap-15.1-1 v | policycoreutils | paquet | 2.8-lp151.3.1 | x86_64 | Dépôt principal | policycoreutils | paquet source | 2.9-143.1 | noarch | selinux | policycoreutils-devel | paquet | 2.9-143.1 | x86_64 | selinux | policycoreutils-devel | paquet | 2.8-lp151.3.1 | x86_64 | openSUSE-Leap-15.1-1 | policycoreutils-devel | paquet | 2.8-lp151.3.1 | x86_64 | Dépôt principal | python-semanage | paquet source | 2.9-86.4 | noarch | selinux | python2-semanage | paquet | 2.9-86.4 | x86_64 | selinux | python2-semanage | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 | python2-semanage | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal i | python3-policycoreutils | paquet | 2.9-143.1 | x86_64 | selinux v | python3-policycoreutils | paquet | 2.8-lp151.3.1 | x86_64 | openSUSE-Leap-15.1-1 v | python3-policycoreutils | paquet | 2.8-lp151.3.1 | x86_64 | Dépôt principal i | python3-selinux | paquet | 2.9-149.1 | x86_64 | selinux v | python3-selinux | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 v | python3-selinux | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal i | python3-semanage | paquet | 2.9-86.4 | x86_64 | selinux v | python3-semanage | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 v | python3-semanage | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal i | python3-setools | paquet | 4.2.2-64.2 | x86_64 | selinux v | python3-setools | paquet | 4.2.0-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 v | python3-setools | paquet | 4.2.0-lp151.1.1 | x86_64 | Dépôt principal i+ | restorecond | paquet | 2.9-13.1 | x86_64 | selinux v | restorecond | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 v | restorecond | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal | restorecond | paquet source | 2.9-13.1 | noarch | selinux | ruby-selinux | paquet | 2.9-149.1 | x86_64 | selinux | ruby-selinux | paquet | 2.8-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 | ruby-selinux | paquet | 2.8-lp151.1.1 | x86_64 | Dépôt principal i+ | selinux-policy | paquet | 20190609-2.6 | noarch | selinux | selinux-policy | paquet source | 20190609-2.6 | noarch | selinux i+ | selinux-policy-devel | paquet | 20190609-2.6 | noarch | selinux i+ | selinux-policy-doc | paquet | 20190609-2.6 | noarch | selinux | selinux-policy-minimum | paquet | 20190609-2.6 | noarch | selinux | selinux-policy-mls | paquet | 20190609-2.6 | noarch | selinux i+ | selinux-policy-targeted | paquet | 20190609-2.6 | noarch | selinux i | selinux-tools | paquet | 2.9-138.1 | x86_64 | selinux v | selinux-tools | paquet | 2.8-lp151.1.30 | x86_64 | openSUSE-Leap-15.1-1 v | selinux-tools | paquet | 2.8-lp151.1.30 | x86_64 | Dépôt principal | setools | paquet source | 4.2.2-64.2 | noarch | selinux i+ | setools-console | paquet | 4.2.2-64.2 | x86_64 | selinux v | setools-console | paquet | 4.2.0-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 v | setools-console | paquet | 4.2.0-lp151.1.1 | x86_64 | Dépôt principal | setools-gui | paquet | 4.2.2-64.2 | x86_64 | selinux | setools-gui | paquet | 4.2.0-lp151.1.1 | x86_64 | openSUSE-Leap-15.1-1 | setools-gui | paquet | 4.2.0-lp151.1.1 | x86_64 | Dépôt principal | setroubleshoot | paquet | 3.3.18-2.4 | noarch | selinux | setroubleshoot | paquet source | 3.3.18-2.4 | noarch | selinux | setroubleshoot-plugins | paquet | 3.3.9-1.4 | noarch | selinux | setroubleshoot-plugins | paquet source | 3.3.9-1.4 | noarch | selinux | setroubleshoot-server | paquet | 3.3.18-2.4 | noarch | selinux -- You are receiving this mail because: You are on the CC list for the bug.
http://bugzilla.opensuse.org/show_bug.cgi?id=1163020 http://bugzilla.opensuse.org/show_bug.cgi?id=1163020#c2 Ghislain LE MEUR <gigi206+suse@gmail.com> changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |gigi206+suse@gmail.com --- Comment #2 from Ghislain LE MEUR <gigi206+suse@gmail.com> --- Created attachment 829486 --> http://bugzilla.opensuse.org/attachment.cgi?id=829486&action=edit supportconfig -- You are receiving this mail because: You are on the CC list for the bug.
participants (1)
-
bugzilla_noreply@novell.com