Secure OS Software for Linux
cancel
Showing results for 
Search instead for 
Did you mean: 

adding users to container

Luis_23
Occasional Contributor

adding users to container

Hi,

I have the understanding that the file /etc/tlinux/users/access controls which compartment a user belongs to and their system rights.

If this is correct, it is not working as it is supposed to on the system. Whenever I log in from the terminal, no matter who the user is, they are put in the 'system' compartment and when they log in ussing ssh, they are put in the 'ssh' compartment. Is there a command I have to run to activate these rules?

Here are two examples of the users on the system:

rmmaarfi:ausers:adm,setcomp:
hgchudas:users:0:

Are these correct? If they are, do you have any ideas on who to make sure each user is put in their specified compartment?

Thanks,
Luis G.
"Climbing is life. The rest? Only details..."
1 REPLY
Hal Rottenberg
Frequent Advisor

Re: adding users to container

Luis,

You are correct on how the access file works, however it only applies to remote SSH connections. Anyone logging in via the console gets the system compartment and the tlinuxadm bit as long as you are logged in via TT1. TTY2+ don't get the tlinuxadm bit so you cannot change compartments from them. This can be changed via /etc/inittab.

As far as your issue, you seem to have configured things correctly. More investigation may find a configuration issue or software defect. You may wish to open a support call with your local HP Response Center.

Regards,

Hal Rottenberg
If at first you don't succeed, then skydiving isn't for you.