IZ2550: qrsh does not work with ssh in RHEL5

[olle]

[Imported from gridengine issuezilla ​http://gridengine.sunsource.net/issues/show_bug.cgi?id=2550]

        Issue #:      2550             Platform:     All      Reporter: olle (olle)
       Component:     gridengine          OS:        Linux
     Subcomponent:    clients          Version:      6.1u4       CC:    None defined
        Status:       NEW              Priority:     P3
      Resolution:                     Issue type:    DEFECT
                                   Target milestone: ---
      Assigned to:    roland (roland)
      QA Contact:     roland
          URL:
       * Summary:     qrsh does not work with ssh in RHEL5
   Status whiteboard:
      Attachments:

     Issue 2550 blocks:
   Votes for issue 2550:


   Opened: Thu Apr 10 01:47:00 -0700 2008 
------------------------


Default in RHEL5 is selinux in enforced mode, but this prevents sshd from
working when used by SGE.

$ rpm -q openssh selinux-policy
openssh-4.3p2-24.el5
selinux-policy-2.4.6-106.el5_1.3

$ sudo /usr/sbin/setenforce 0
$ qrsh /bin/true
$ sudo /usr/sbin/setenforce 1
$ qrsh /bin/true
Read from remote host testnet-s8.testnet.jeppesensystems.com: Connection reset
by peererror: error reading returncode of remote command

/var/log/audit/audit.log:
type=USER_LOGIN msg=audit(1207815802.343:1051): user pid=2176 uid=0 auid=0
subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='acct="olle":
exe="/usr/sbin/sshd" (hostname=?,
addr=10.10.2.18, terminal=sshd res=failed)'
type=USER_ACCT msg=audit(1207815802.361:1052): user pid=2176 uid=0 auid=0
subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='PAM: accounting acct="olle"
: exe="/usr/sbin/sshd" (hostname=testnet-s8.testnet.jeppesensystems.com,
addr=10.10.2.18, terminal=ssh res=success)'
type=USER_ROLE_CHANGE msg=audit(1207815802.454:1053): user pid=2176 uid=0 auid=0
subj=root:system_r:unconfined_t:s0-s0:c0.c1023 msg='sshd:
default-context=user_u:system_r:unconfined_t:s0
selected-context=user_u:system_r:unconfined_t:s0-s0:c0.c1023:
exe="/usr/sbin/sshd" (hostname=?, addr=?, terminal=? res=failed)'

[dlove]

See #1377