selinux-policy-strict-2.2.23-15 I couldn't figure out why stuff in ~/.ssh was getting set to user_home_t rather than user_home_ssh_t. I had to do the following patch (to make more-specifics come later) and re-run genhomedircon before restorecon and friends started DTRT... --- homedir_template.dist 2006-03-15 16:05:28.000000000 -0500 +++ homedir_template 2006-03-15 17:18:02.000000000 -0500 @@ -2,6 +2,7 @@ HOME_ROOT -d system_u:object_r:home_root_t:s0 HOME_ROOT/\.journal <<none>> HOME_ROOT/lost\+found -d system_u:object_r:lost_found_t:s0 +HOME_DIR/.+ system_u:object_r:ROLE_home_t:s0 HOME_DIR/((www)|(web)|(public_html))(/.+)? system_u:object_r:httpd_ROLE_content_t:s0 HOME_DIR/\.gnupg(/.+)? system_u:object_r:ROLE_gpg_secret_t:s0 HOME_DIR/\.ircmotd -- system_u:object_r:ROLE_irc_home_t:s0 @@ -12,7 +13,6 @@ HOME_DIR/\.ssh(/.*)? system_u:object_r:ROLE_home_ssh_t:s0 HOME_DIR/\.uml(/.*)? system_u:object_r:ROLE_uml_rw_t:s0 HOME_DIR -d system_u:object_r:ROLE_home_dir_t:s0 -HOME_DIR/.+ system_u:object_r:ROLE_home_t:s0 HOME_DIR/\.ICEauthority.* -- system_u:object_r:ROLE_iceauth_home_t:s0 HOME_DIR/\.xauth.* -- system_u:object_r:ROLE_xauth_home_t:s0 HOME_DIR/\.Xauthority.* -- system_u:object_r:ROLE_xauth_home_t:s0
Attachment:
pgpUvv5RR3VPU.pgp
Description: PGP signature
-- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
