Currently we have the attributes user_home_dir_type and user_home_type applied to the main types for the home directory of regular users in a strict policy configuration (this means user_t etc). While it is possible to have unconfined_t and user_t on the same system, I don't expect this to be a common configuration. In fact I expect that in practice they will be mutually exclusive. Therefore when unconfined_t is used it will be desired that they can do all normal things, such as having a POP server read mail from their ~/Maildir. Allowing such access would mean adding user_home_dir_type and user_home_type attributes to unconfined_home_dir_t and unconfined_home_t respectively. Is there any reason for not doing this? -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Blog http://www.coker.com.au/sponsorship.html Sponsoring Free Software development -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
