Re: Linux sandbox and the -i option

[Miroslav Grepl]

On 03/07/2016 06:18 PM, Bill wrote:
>  Is anyone else having issues with the
>  % sandbox -i [path]
>  not working?  What happens is the context is incorrectly done.
>  % rpm -q -f /usr/bin/sandbox shows I am using
>  policycoreutils-python-utils-2.4-20.fc23.x86_64
>  
>  
>  %ls -Zd /tmp/.sandbox_home_[whatever]
>  gives
>  unconfined_u:object_r:sandbox_file_t:s0:cxx,cyyy .
>  BUT
>  %ls -Z [path] is
>  gives
>  unconfined_u:object_r:mozilla_home_t:s0 [path] 
Ok I can reproduce it. Could you please reopen a new bug?

Thank you.

>  
>  This causes all sorts of read/write issues.
>  
>  I guess I can write a script to do the
>  chcon, but that is a bit painful and you have to hunt
>  for the correct sandbox directory (not optimal at all).
>  
>  Any suggestions?
>  Bill Chimiak
>  LTS
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  http://lists.fedoraproject.org/admin/lists/[e-mail]
>   

-- 
Miroslav Grepl
Senior Software Engineer, SELinux Solutions
Red Hat, Inc.