I added the following line to the end of /etc/pam.d/[login,sshd,su]
session required pam_namespace.so debug
I added the following line to /etc/security/namespace.conf
/var/polyinstantiated /var/polyinstantiated/polyinstantiated-
inst/ context root,adm
If I ssh to test@localhost and touch /var/polyinstantiated/foo I get
cd /var
[root@cipso var]# ls -lR polyinstantiated/
polyinstantiated/:
total 20
d--------- 3 root root 4096 Jun 23 18:32 polyinstantiated-inst
polyinstantiated/polyinstantiated-inst:
total 8
drwxrwxrwx 2 root root 4096 Jun 23 18:41 test
polyinstantiated/polyinstantiated-inst/test:
total 8
-rw-rw-r-- 1 test test 0 Jun 23 18:41 bar
-rw-rw-r-- 1 test test 0 Jun 23 18:35 foo
Shouldn't the instance name be the context instead of the username
(test)?
joe
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
