Craig White <craigwhite <at> azapple.com> writes: > $ ls -lZ /home/craig/.ssh > -rw------- craig craig user_u:object_r:user_home_t > client.id_dsa.key > -rw------- craig craig user_u:object_r:user_home_t id_dsa > -rw-rw-r-- craig craig unconfined_u:object_r:user_home_t > id_dsa.keystore > -rw-r--r-- craig craig unconfined_u:object_r:user_home_t id_dsa.pub > -rw------- craig craig unconfined_u:object_r:user_home_t id_rsa > -rw-rw-r-- craig craig unconfined_u:object_r:user_home_t > id_rsa.keystore > -rw-r--r-- craig craig unconfined_u:object_r:user_home_t id_rsa.pub > -rw------- craig craig user_u:object_r:user_home_t known_hosts > > but the issue of policy is that these are not the settings these files > would get if they were located in /opt. Craig I just changed the contexts to type user_home_t for the files in .ssh and this fixed the issue! Your last listing of the contexts was the crucial one - This is excellent and thanks again for your help - I'll sleep easier tonight! -- fedora-list mailing list fedora-list@xxxxxxxxxx To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list