If I have a program that calls setfscreatecon on a directory that has a
transition, the transition rule wins. I think the setfscreatecon should
win.
Sandbox creates a .sandboxRANDOM directory in the current working
directory with setfscreatecon, If I do this in ~dwalsh It does not
work. If I do it in ~dwalsh/.sandbox or /tmp or any directory other
then my homedir toplevel it works.
Here is a python script that shows the behaviour
#!/usr/bin/python
from tempfile import mkdtemp
import selinux, os
selinux.setfscreatecon("staff_u:object_r:sandbox_x_file_t:s0:c1")
homedir = mkdtemp(dir="~/.sandbox", prefix=".sandbox")
print selinux.getfscreatecon()
print homedir
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with
the words "unsubscribe selinux" without quotes as the message.