mirror of
https://github.com/jupyterhub/jupyterhub.git
synced 2025-10-16 14:33:00 +00:00
Cleanup the sudo/selinux section
This commit is contained in:
@@ -219,14 +219,14 @@ Finally, start the server as our newly configured user, `rhea`:
|
|||||||
|
|
||||||
And try logging in.
|
And try logging in.
|
||||||
|
|
||||||
### Troubleshooting: SELinux
|
## Troubleshooting: SELinux
|
||||||
|
|
||||||
If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you.
|
If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you.
|
||||||
Here's how you can make a module to allow this.
|
Here's how you can make a module to allow this.
|
||||||
First, put this in a file sudo_exec_selinux.te:
|
First, put this in a file named `sudo_exec_selinux.te`:
|
||||||
|
|
||||||
```bash
|
```bash
|
||||||
module sudo_exec 1.1;
|
module sudo_exec_selinux 1.1;
|
||||||
|
|
||||||
require {
|
require {
|
||||||
type unconfined_t;
|
type unconfined_t;
|
||||||
@@ -246,9 +246,9 @@ $ semodule_package -o sudo_exec_selinux.pp -m sudo_exec_selinux.mod
|
|||||||
$ semodule -i sudo_exec_selinux.pp
|
$ semodule -i sudo_exec_selinux.pp
|
||||||
```
|
```
|
||||||
|
|
||||||
### Troubleshooting: PAM session errors
|
## Troubleshooting: PAM session errors
|
||||||
|
|
||||||
If the PAM authentication doesn't work and you see errors for
|
If the PAM authentication doesn't work and you see errors for
|
||||||
`login:session-auth`, or similar, considering updating to `master`
|
`login:session-auth`, or similar, considering updating to a more recent version
|
||||||
and/or incorporating this commit https://github.com/jupyter/jupyterhub/commit/40368b8f555f04ffdd662ffe99d32392a088b1d2
|
of jupyterhub and disabling the opening of PAM sessions with
|
||||||
and configuration option, `c.PAMAuthenticator.open_sessions = False`.
|
`c.PAMAuthenticator.open_sessions=False`.
|
||||||
|
Reference in New Issue
Block a user