Gene Czarcinski wrote:
OK, I am starting to work with MCS.
First I added some categories to setrans.conf:
Then I added a user to seusers:
Then I logged into that user.
All new (written to?) files get created with s0:c0.c15 like:
-rw-r--r-- gc gc user_u:object_r:user_home_t:s0:c0.c15
You want to specify
This sets up user gc to be an SELinux user user_u with a range of
Categories from s0-s0:c0.c15. By default he will login with level s0
and all files will be created as s0. If you want to create a file under
a different category you can use chcon or chcat to create it.
including some in /tmp:
drwx------ gc gc user_u:object_r:tmp_t:s0:c0.c15 orbit-gc
drwx------ gc gc user_u:object_r:tmp_t:s0:c0.c15 gconfd-gc
Shouldn't they default to nothing and only get set if I do a chcat?
BTW, I seem to remember that there were some gripe messages during bootup
about the files in /tmp ... nothing in /var/log/* or dmesg.
Bug, feature, or what am I doing wrong?
fedora-selinux-list mailing list