openstack/ansible-hardening
Code Issues Proposed changes
Files
83fe89e0c8dead796f33e42d81f01f45e78a1419
ansible-hardening/doc/metadata/rhel7/RHEL-07-020090.rst
Major Hayden 27395799f0 [Docs] Exception for SELinux user confinement 
This patch adds an exception for SELinux user confinement since it's not
possible to determine admin and non-admin users within the security role
itself.

Implements: blueprint security-rhel7-stig
Change-Id: Ifbcc88c3b8f862bead7710140234678f7287ec09
2016-11-29 14:44:54 -06:00

662 B
Raw Blame History

---id: RHEL-07-020090 status: exception - manual intervention tag: auth ---

The tasks in the security role cannot determine the access levels of individual users.

Deployers are strongly encouraged to configure SELinux user confinement on compatible systems using semanage login. Refer to the Confining Existing Linux Users documentation from Red Hat for detailed information and command line examples.