hazza/jupyterhub
1
0
Fork 0
mirror of https://github.com/jupyterhub/jupyterhub.git synced 2025-10-16 14:33:00 +00:00
Code Issues Packages Projects Releases Wiki Activity

Cleanup the sudo/selinux section

Browse Source
This commit is contained in:
Matthias Bussonnier
2018-10-18 13:48:16 -07:00
parent e9620df5b5
commit 0670423a3d
1 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

22
docs/source/reference/config-sudo.md
View File

@@ -204,8 +204,8 @@ The simplest way to deal with this is to make a directory owned by your Hub user
and use that as the CWD when launching the server. and use that as the CWD when launching the server.
```bash ```bash
$ sudo mkdir /etc/jupyterhub $ sudo mkdir /etc/jupyterhub
$ sudo chown rhea /etc/jupyterhub $ sudo chown rhea /etc/jupyterhub
``` ```
## Start jupyterhub ## Start jupyterhub
@@ -213,20 +213,20 @@ and use that as the CWD when launching the server.
Finally, start the server as our newly configured user, `rhea`: Finally, start the server as our newly configured user, `rhea`:
```bash ```bash
$ cd /etc/jupyterhub $ cd /etc/jupyterhub
$ sudo -u rhea jupyterhub --JupyterHub.spawner_class=sudospawner.SudoSpawner $ sudo -u rhea jupyterhub --JupyterHub.spawner_class=sudospawner.SudoSpawner
``` ```
And try logging in. And try logging in.
### Troubleshooting: SELinux ## Troubleshooting: SELinux
If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you. If you still get a generic `Permission denied` `PermissionError`, it's possible SELinux is blocking you.
Here's how you can make a module to allow this. Here's how you can make a module to allow this.
First, put this in a file sudo_exec_selinux.te: First, put this in a file named `sudo_exec_selinux.te`:
```bash ```bash
module sudo_exec 1.1; module sudo_exec_selinux 1.1;
require { require {
type unconfined_t; type unconfined_t;
@@ -246,9 +246,9 @@ $ semodule_package -o sudo_exec_selinux.pp -m sudo_exec_selinux.mod
$ semodule -i sudo_exec_selinux.pp $ semodule -i sudo_exec_selinux.pp
``` ```
### Troubleshooting: PAM session errors ## Troubleshooting: PAM session errors
If the PAM authentication doesn't work and you see errors for If the PAM authentication doesn't work and you see errors for
`login:session-auth`, or similar, considering updating to `master` `login:session-auth`, or similar, considering updating to a more recent version
and/or incorporating this commit https://github.com/jupyter/jupyterhub/commit/40368b8f555f04ffdd662ffe99d32392a088b1d2 of jupyterhub and disabling the opening of PAM sessions with
and configuration option, `c.PAMAuthenticator.open_sessions = False`. `c.PAMAuthenticator.open_sessions=False`.