Re: SELinux context for ssh host keys?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]



On Tue, February 10, 2015 04:18, Andrew Holway wrote:
> On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg@xxxxxxxx>
> wrote:
>
>>
>> > On Feb 9, 2015, at 12:27 PM, Robert Nichols
>> <rnicholsNOSPAM@xxxxxxxxxxx>
>> wrote:
>> >
>> > On 02/09/2015 11:14 AM, James B. Byrne wrote:
>> >> So, I decided to run restorecon -v to
>> >>
>> ...
>> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context
>> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0
>>
>
> Why are you putting your SSH key in /etc/ ?
>
> With SELinux its normally better to go with the flow. find out which
> directories have the desired label and keep your objects in there.
>
> I'm guessing in this case ~/.ssh/
>
>




-- 
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB@xxxxxxxxxxxxx
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

_______________________________________________
CentOS mailing list
CentOS@xxxxxxxxxx
http://lists.centos.org/mailman/listinfo/centos




[Index of Archives]     [CentOS]     [CentOS Announce]     [CentOS Development]     [CentOS ARM Devel]     [CentOS Docs]     [CentOS Virtualization]     [Carrier Grade Linux]     [Linux Media]     [Asterisk]     [DCCP]     [Netdev]     [Xorg]     [Linux USB]
  Powered by Linux