-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/04/2011 11:54 AM, Matthew Saltzman wrote: > On Tue, 2011-01-04 at 11:45 -0500, Daniel J Walsh wrote: >> You would need the combination of relabeling the homedir and searching >> /var/lib/amanda. >> >> WHich is what we will be adding to policy. > > Ah, I don't think that was in your earlier message. If the policy is > published someplace, I'd be happy to test. > > One question: How does a regular user's .ssh directory get relabeled? > Restorecon. Or by transition. If you use ssh-copy-id, selinux/sshd will created the files with the correct labeling. If a user logged into the console via X does mkdir ~/.ssh, restorecond will watch for the creation of the directory and label it correctly. If the user does it via ssh/mkdir .ssh, it will be mislabeled, until they run restorecon on it. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/ iEYEARECAAYFAk0jgNAACgkQrlYvE4MpobMskQCggIMPvtF5gRVEbEYWaAaAiC70 ZfsAnRkoOoJksZ1tN6cSUdJEnZPjqh0l =uvqc -----END PGP SIGNATURE----- -- users mailing list users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe or change subscription options: https://admin.fedoraproject.org/mailman/listinfo/users Guidelines: http://fedoraproject.org/wiki/Mailing_list_guidelines
