I see the same thing on RHEL 6.5.
So should I assume this is a bug in SElinux/OS? Even so is there a way that I can work around it? Would there be anything wrong with transitioning files I create in tmp from tmp_t to user_tmp_t? > Date: Thu, 20 Feb 2014 14:21:55 -0500 > From: dwalsh@xxxxxxxxxx > To: swazup@xxxxxxxxxxx; selinux@xxxxxxxxxxxxxxxxxxxxxxx > Subject: Re: Correct way to use booleans > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > On 02/20/2014 01:41 PM, Jayson Hurst wrote: > > I am running in permissive mode, my module is in permissive mode. > > > > I am actually running on RHEL 6.0. > > > > So in this scenario even though my daemon is authenticating the user it is > > not responsible for context that the krb5cc_xxx file gets created as? > > > > The login daemons should be creating this file with the correct context. > user_tmp_t. > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1 > Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ > > iEYEARECAAYFAlMGVdMACgkQrlYvE4MpobPm+QCfX1s69csbRU8xfg8m796N+9Si > cZYAmgP8bmo4vV+ug10x8tlxKSr6rTqI > =2zvU > -----END PGP SIGNATURE----- |
-- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux