ssh on SElinux with permisive mode

[sruthi mohan]

Hi,
currently in my system Selinux is in permissive mode.
I am unable to connect remotely through ssh.
i have done semodule -DB  I did not find any ssh related messages on
audit.log.
Request some help in resolving this issue
Thanks and Regards

[Manuel Wolfshant]

On 12/19/2012 01:55 PM, sruthi mohan wrote:
> Hi,
> currently in my system Selinux is in permissive mode.
> I am unable to connect remotely through ssh.
> i have done semodule -DB  I did not find any ssh related messages on 
> audit.log.
> Request some help in resolving this issue
> Thanks and Regards

that simply means that your problem is not related to selinux. check the 
output of ssh -v and if you cannot find anything useful, start the 
server in debug mode using -dD.
also, make sure that no firewall ( either yours or placed between your 
server and client machines ) blocks communication. and last but not 
least, make sure that the server really starts and is listening on the 
external interface.

[Antonio Trande]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Il 19/12/2012 14:19, Manuel Wolfshant ha scritto:
> On 12/19/2012 01:55 PM, sruthi mohan wrote:
> > Hi, currently in my system Selinux is in permissive mode. I am
> > unable to connect remotely through ssh. i have done semodule -DB
> > I did not find any ssh related messages on audit.log. Request
> > some help in resolving this issue Thanks and Regards
>
> that simply means that your problem is not related to selinux.
> check the output of ssh -v and if you cannot find anything useful,
> start the server in debug mode using -dD. also, make sure that no
> firewall ( either yours or placed between your server and client
> machines ) blocks communication. and last but not least, make sure
> that the server really starts and is listening on the external
> interface.
>
> -- selinux mailing list [e-mail] 
> https://admin.fedoraproject.org/mailman/listinfo/selinux

Especially that means that SELinux can't be the problem because it is
in Permissive Mode:

#       enforcing  - SELinux security policy is enforced.
#       permissive - SELinux prints warnings instead of enforcing.
#       disabled   - No SELinux policy is loaded.

- -- 
Antonio Trande
"Fedora Ambassador"
"Fedora italian translation group"
"Blogger"

mail: mailto:[e-mail]
Homepage: http://www.fedora-os.org
Sip Address : sip:sagitter AT ekiga.net
Jabber :sagitter AT jabber.org
GPG Key: D400D6C4
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with undefined - http://www.enigmail.net/
>
> iQIcBAEBAgAGBQJQ0b/3AAoJED2vIvfUANbE6EcQAMfGuaiANuTQe0355C3jhAvO
> a1xirs8ed8GH0Vj08X1MK28bc8oVXSh6Q1+kZlTby8/hM54oEvMH4f6sOzd2k4eD
> XiVQk6ScokOmWAgwrhPqAdOPV0hVaU+WcosDv47wa3cX+tZgiV6FzJEYhyJvViqc
> m2plOepC4hXz3+8smxjF+BGg/iG6EPwKCo/KjXVJXstSYUrsPvxJmN5g5qgKIHor
> 8vd+IVwZo0tkKw4mEG9TuxchEySbe5lHhuOqjkFrvqcmH3BT4b5NbBLwUVfJ5McJ
> L3cAzDZs29HgXcl7yP0c+EZ7nFeaCPkQLTvjB7gRlg3WxRH2ble1WnOMdvlYQdDH
> hZSffmNFzbssM4VBHsNWDvpPwKVG9Vemqe8xqDQZGaOLy/tRKEdu2UCwPEa4Yzl/
> U/IEWCdQnxp4mSKjh0jW9SCqzj9vwLlt+WMFZ+VcPzg7uEPgBL6h9fOqH0sxMljP
> 7jGb454B37yLca3aDQSvwsW6DKU2KA0RUIlRgKADRM5CWoo/T8H6F6ZthsEZSAav
> 4nkqdrs02/smcUkdhKQFXRdjxc26J1fEDKce3JFTV5dgvlp36ysAjM7MGRZLyTGA
> tXO5VfooWt87SAQYSHSV9tI1V12sQRsxGThGbr3MviqGfRCVHqzKX62S9aKsVXos
> rBVJavUErUATiP715H9j
> =R4SP
> -----END PGP SIGNATURE-----

[Miroslav Grepl]

On 12/19/2012 12:55 PM, sruthi mohan wrote:
> Hi,
> currently in my system Selinux is in permissive mode.
> I am unable to connect remotely through ssh.
> i have done semodule -DB  I did not find any ssh related messages on 
> audit.log.
> Request some help in resolving this issue
> Thanks and Regards
>
> --
> selinux mailing list
> [e-mail]
> https://admin.fedoraproject.org/mailman/listinfo/selinux

Try to check /var/log/secure to see more info.

Regards,
Miroslav

[Adam Przybyla]

On Thu, Dec 20, 2012 at 08:24:31PM +0100, Miroslav Grepl wrote:
> On 12/19/2012 12:55 PM, sruthi mohan wrote:
>  Hi,
>  currently in my system Selinux is in permissive mode.
>  I am unable to connect remotely through ssh.
>  i have done semodule -DB  I did not find any ssh related messages on
>  audit.log.
>  Request some help in resolving this issue
>  Thanks and Regards
>
> --
>  selinux mailing list
>  [1][e-mail]
>  [2]https://admin.fedoraproject.org/mailman/listinfo/selinux
>
> Try to check /var/log/secure to see more info.

... check your logs for selinux errors. Regards
    							Adam Przybyla