Cleanup the sudo/selinux section

This commit is contained in:
Matthias Bussonnier
2018-10-18 13:48:16 -07:00
parent e9620df5b5
commit 0670423a3d

View File

@@ -219,14 +219,14 @@ Finally, start the server as our newly configured user, `rhea`:
And try logging in. And try logging in.
### Troubleshooting: SELinux ## Troubleshooting: SELinux
If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you. If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you.
Here's how you can make a module to allow this. Here's how you can make a module to allow this.
First, put this in a file sudo_exec_selinux.te: First, put this in a file named `sudo_exec_selinux.te`:
```bash ```bash
module sudo_exec 1.1; module sudo_exec_selinux 1.1;
require { require {
type unconfined_t; type unconfined_t;
@@ -246,9 +246,9 @@ $ semodule_package -o sudo_exec_selinux.pp -m sudo_exec_selinux.mod
$ semodule -i sudo_exec_selinux.pp $ semodule -i sudo_exec_selinux.pp
``` ```
### Troubleshooting: PAM session errors ## Troubleshooting: PAM session errors
If the PAM authentication doesn't work and you see errors for If the PAM authentication doesn't work and you see errors for
`login:session-auth`, or similar, considering updating to `master` `login:session-auth`, or similar, considering updating to a more recent version
and/or incorporating this commit https://github.com/jupyter/jupyterhub/commit/40368b8f555f04ffdd662ffe99d32392a088b1d2 of jupyterhub and disabling the opening of PAM sessions with
and configuration option, `c.PAMAuthenticator.open_sessions = False`. `c.PAMAuthenticator.open_sessions=False`.