Hi All, I am using CentOS-5 x86_64, I have followed what u have sent the steps. But still i am getting same user login problem. I am not able to login user properly in system. These are i have followed the steps. 1. Create a source policy module:- #cd /home/prakash #vi prakash.te policy_module(prakash, 0.0.1) role prakash_r; userdom_unpriv_user_template(prakash); 2. Build the source policy module: <div class="Ih2E3d"> #make -f /usr/share/selinux/devel/Makefile </div><div class="Ih2E3d"> 3. Install the binary policy module: </div> #semodule -i prakash.pp 4. Create default contexts for prakash: #cd /etc/selinux/targeted/contexts/users #vi prakash system_r:system_local_login_t:s0 prakash_r:prakash_t:s0 system_r:remote_login_t:s0 prakash_r:prakash_t:s0 system_r:sshd_t:s0 prakash_r:prakash_t:s0 system_r:crond_t:s0 prakash_r:prakash_t:s0 system_r:xdm_t:s0 prakash_r:prakash_t:s0 prakash_r:prakash_su_t:s0 prakash_r:prakash_t:s0 prakash_r:prakash_sudo_t:s0 prakash_r:prakash_t:s0 system_r:initrc_su_t:s0 prakash_r:prakash_t:s0 prakash_r:prakash_t:s0 prakash_r:prakash_t:s0 5. Create a SELinux user mapping for prakash: <div class="Ih2E3d"> #semanage user -a -L s0 -r s0-s0 -R "prakash_r" -P user prakash 6. Add new prakash user for user1: #useradd -Z prakash user1 7. when i will try to login in the system, will get permission denied message. gtt login: user1 password: XXXXXX -bash: /home/user1/.bash_profile: Permission denied -bash-3.1$id uid=524(user1) gid=525(user1) groups=525(user1) context=prakash:prakash_r:prakash_t I tryed to one more user then all so i got same problem. I am not sure what i did the mistakes, Please help me what i have to do. Thanks, Prakash, k, h. </div> <div class="gmail_quote">On Wed, Feb 25, 2009 at 9:17 PM, Daniel J Walsh <<a href="mailto:dwalsh@redhat.com">dwalsh@redhat.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 <div><div></div><div class="Wj3C7c"> prakash hallalli wrote: > Hi All, > > I have created 'myuser' user and created custom module policy for > user. > I have installed successfully module, but when i logging myuser in > i will get bash prompt. > > I have followed as below steps for creating module. > > #vi myuser.te > policy_module(myuser, 0.0.1) > role myuser_r; > userdom_unpriv_user_templete(myuser) > > #make -f /usr/share/selinux/devel/Makefile > #sudo semodule i myuser.pp > #semanage user a L s0 r s0s0 L "myuser1_r" P user myuser1 > #useradd Z myuser1 myuser1 > > I did all the step when i try login in system following error will display. > > gtt login: myuser > password: XXXXXX > > -bash: /home/myuser/.bash_profile: Permission denied > -bash-3.1$ > > Please give what should i have to do. > > Thanks, > Prakash. > > > </div></div>> ------------------------------------------------------------------------ <div class="Ih2E3d">> > -- > fedora-selinux-list mailing list > <a href="mailto:fedora-selinux-list@redhat.com">fedora-selinux-list@redhat.com</a> > <a href="https://www.redhat.com/mailman/listinfo/fedora-selinux-list" target="_blank">https://www.redhat.com/mailman/listinfo/fedora-selinux-list</a> </div>Which OS and Version. Depending on the policy you might need to relabe the homedir to get the labels correct. restorecon -R -v /home -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Fedora - <a href="http://enigmail.mozdev.org" target="_blank">http://enigmail.mozdev.org</a> iEYEARECAAYFAkmlaCEACgkQrlYvE4MpobMMqACgyOEwLuvH0xgp2I97QXOtNLEa YP4AnRe8ozJhduWstWubPIO3qxptGO8E =UjzM -----END PGP SIGNATURE----- </blockquote></div>