<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
Ivan Gyurdiev wrote:
<blockquote cite="mid1114579036.18640.13.camel@localhost.localdomain"
type="cite">
<blockquote type="cite">
<pre wrap="">-rw-r--r-- smearp smearp user_u:object_r:user_home_t flashplayer.xpt
-rwxr-xr-x smearp smearp user_u:object_r:texrel_shlib_t
</pre>
</blockquote>
<pre wrap=""><!---->
This is correct, but it's not done automatically, because /home is
entirely skipped when changing the contexts after a policy upgrade.
Personally, I think this is a major problem, but Daniel Walsh points out
that (1) automatic restorecon on /home presents a security risk of
mislabeled files ( like gpg keys and such in the wrong place), and (2)
automatic restorecon on /home might take a very long time.
I think if we are to introduce more fine-grained labeling of "$HOME" in
the future (which we should), this problem needs to be solved somehow.
</pre>
</blockquote>
This is now bug:
<a class="moz-txt-link-freetext" href="https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=151870">https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=151870</a><br>
<br>
The problem is apparently the fact that RPM does not support the latest
version of matchpathcon, which allows for local customizations of
homdircontext... (and as such, the incorrect security context is being
set up for the /home directory during the initial OS load) Hopefully
this can be fixed in time for the FC4 release!<br>
<br>
-Sean<br>
</body>
</html>