2020-04-08 02:25:16

by Russell Coker

Subject: logind shadow access

# audit2allow -l < /var/log/audit/audit.log |tail -1
allow systemd_logind_t shadow_t:file read;

Is there any good reason why systemd_logind might need to access /etc/shadow?

--
My Main Blog http://etbe.coker.com.au/
My Documents Blog http://doc.coker.com.au/

2020-04-08 06:47:16

by Topi Miettinen

Subject: Re: logind shadow access

On 8.4.2020 5.25, Russell Coker wrote:
> # audit2allow -l < /var/log/audit/audit.log |tail -1
> allow systemd_logind_t shadow_t:file read;
>
> Is there any good reason why systemd_logind might need to access /etc/shadow?
>

For account enable/disable state and so on:
https://github.com/systemd/systemd/issues/15105.

-Topi