Permissions for new users

[Russell Coker]

On Thursday 10 February 2005 11:13, Richard Jensen <richard at rhjensen.com> 
wrote:
> Hi. I'm wondering about the permissions new users get
> when they are created. Before SELinux I had to add users
> to 'wheel' to enable them to su to root.

You can enable that feature by editing /etc/pam.d/su .

> I did an adduser and it seems to be unrestricted:
>
> [testse at lankhmar ~]$ id -Z
> user_u:system_r:unconfined_t

Fedora Core 3 and RHEL4 install the "targeted" policy by default which does 
not restrict user logins.  You have to install the "strict" policy to 
restrict user logins.

-- 
http://www.coker.com.au/selinux/   My NSA Security Enhanced Linux packages
http://www.coker.com.au/bonnie++/  Bonnie++ hard drive benchmark
http://www.coker.com.au/postal/    Postal SMTP/POP benchmark
http://www.coker.com.au/~russell/  My home page