Did cert_t go away for /var/named/chroot/etc/pki?

[Edward Kuns]

Due to the problems I've described recently, I fully reloaded my selinux
policy and finally did a full relabel.  During this relabel, I saw
things such as the following:

restorecon
reset /var/named/chroot/etc/pki/dnssec-keys/harvest/time.gov.conf
context system_u:object_r:cert_t:s0->system_u:object_r:etc_t:s0

and when I run system-config-selinux and go to "File labeling" and
search for pki, indeed I only see pki in the two following file specs:

/etc/pki(/.*)?
    /etc/pki/dovecot(/.*)?

The policy currently installed is:

selinux-policy-3.6.12-69.fc11.noarch
selinux-policy-targeted-3.6.12-69.fc11.noarch

Am I missing something?  Is this an expected change?

Thanks

Eddie

[Miroslav Grepl]

On 08/03/2009 01:03 AM, Edward Kuns wrote:
> Due to the problems I've described recently, I fully reloaded my selinux
> policy and finally did a full relabel.  During this relabel, I saw
> things such as the following:
>
> restorecon
> reset /var/named/chroot/etc/pki/dnssec-keys/harvest/time.gov.conf
> context system_u:object_r:cert_t:s0->system_u:object_r:etc_t:s0
>
> and when I run system-config-selinux and go to "File labeling" and
> search for pki, indeed I only see pki in the two following file specs:
>  /etc/pki(/.*)?
>  /etc/pki/dovecot(/.*)?
>
> The policy currently installed is:
>
> selinux-policy-3.6.12-69.fc11.noarch
> selinux-policy-targeted-3.6.12-69.fc11.noarch
>
> Am I missing something?  Is this an expected change?
>         Thanks
>
>            Eddie
>
> --
> fedora-selinux-list mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Eddie,

I have a fix for this in selinux-policy-3.6.12-72.fc11

Regards,
Miroslav