<div dir="ltr"><div><font color="#000099" size="1">Hi Michal...</font></div> <div><font color="#000099" size="1"> </font></div> <div><font color="#000099" size="1">My question was about the <strong>roles</strong> and not about seuser.<br>My seuser is <strong>staff_u</strong> and of course the mappings selinux users into selinux roles (1:n)</font></div> <div><font color="#000099" size="1"> </font></div> <div><font color="#000099" size="1">My question was how it know to choose the <strong>staff_r</strong> role and not the sysadm_r ...?</font></div> <div><font color="#000099" size="1"> </font></div> <div><font size="1"><font color="#000099">Yossi<br></font><br></font></div> <div class="gmail_quote"><font size="1">On Thu, Mar 12, 2009 at 10:03 AM, Michal Zimen <span dir="ltr"><<a href="mailto:michal.zimen@gmail.com">michal.zimen@gmail.com</a>></span> wrote:<br></font> <blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"> <div><font size="1">Hi, </font> <div class="im"><br><br><font size="1"> <br> <br>On Thu, 2009-03-12 at 00:52 +0200, yossi ozani wrote: </font> <blockquote type="CITE"><font size="1">Hi all...<br><br>I started to learn selinux and I have a question about mapping in selinux. <br>I logged in as <b>staff_u. </b>The command id -Z gives me the following context: user_u:user_r:user_t<br> The command: semanage user -l |grep staff_u<br>print the output: <b>staff_u sysadm_r staff_r</b><br><br><u>My questions:</u><br>1) How the login process know to choose the <b>staff_r</b> role and not the<b> sysadm_r</b> role ?<br> </font></blockquote></div><font size="1"> semenage login -l<br> --mappings linux users into selinux user (1:1) </font> <div class="im"><br> <blockquote type="CITE"><font size="1">2) If only one is the appropriate role why I can see a list of roles to some seusers like <b>staff_u</b> and <b>root</b> ?<br></font></blockquote></div><font size="1"> semanage user -l<br> --mappings selinux users into selinux roles (1:n) </font> <div class="im"><br> <blockquote type="CITE"><br><font size="1">Many thanks for the help<br>Yossi<br><br><br></font></blockquote></div></div><br><font size="1">--<br>ubuntu-hardened mailing list<br></font><a href="mailto:ubuntu-hardened@lists.ubuntu.com"><font size="1">ubuntu-hardened@lists.ubuntu.com</font></a><br> <a href="https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened" target="_blank"><font size="1">https://lists.ubuntu.com/mailman/listinfo/ubuntu-hardened</font></a><br><br></blockquote></div><br></div>