firefox downloaded files are user_u:object_r:tmp_t

[dragoran]

When I download a file using firefox it is saved as 
user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
I have a folder which is shared using samba and when I download a file 
into it I had to restorecon it in order to let the windows clients (and 
linux) see it.
I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
note: I am using a 32bit firefox build

[Daniel J Walsh]

dragoran wrote:
>  When I download a file using firefox it is saved as 
>  user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
>  I have a folder which is shared using samba and when I download a file 
>  into it I had to restorecon it in order to let the windows clients 
>  (and linux) see it.
>  I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
>  note: I am using a 32bit firefox build
>
>  -- 
>  fedora-selinux-list mailing list
>  fedora-selinux-list(a)redhat.com
>  https://www.redhat.com/mailman/listinfo/fedora-selinux-list 
Are you saving it to
the /tmp directory?  If you are it will get saved 
as tmp_t.  Since files default to the context of their parent directory.

If you them mv /tmp/download.file ~/

You will maintain tmp_t.

If you use cp /tmp/download.file ~/

It will get user_home_t.

Dan

[dragoran]

Daniel J Walsh wrote:
>  dragoran wrote:
> > When I download a file using firefox it is saved as 
> > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > I have a folder which is shared using samba and when I download a 
> > file into it I had to restorecon it in order to let the windows 
> > clients (and linux) see it.
> > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > note: I am using a 32bit firefox build
> >
> > -- 
> > fedora-selinux-list mailing list
> > fedora-selinux-list(a)redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>  Are you saving it to the /tmp directory?  If you are it will get saved 
>  as tmp_t.  Since files default to the context of their parent directory.
>
>  If you them mv /tmp/download.file ~/
>
>  You will maintain tmp_t.
>
>  If you use cp /tmp/download.file ~/
>
>  It will get user_home_t.
>
>  Dan
>
>  
no I simply download it to a dir in home which is labeled 
user_u:object_r:user_home_t

[Paul Howarth]

On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
>  Daniel J Walsh wrote:
>  > dragoran wrote:
>  >> When I download a file using firefox it is saved as 
>  >> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
>  >> I have a folder which is shared using samba and when I download a 
>  >> file into it I had to restorecon it in order to let the windows 
>  >> clients (and linux) see it.
>  >> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
>  >> note: I am using a 32bit firefox build
>  >>
>  >> -- 
>  >> fedora-selinux-list mailing list
>  >> fedora-selinux-list(a)redhat.com
>  >> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>  > Are you saving it to the /tmp directory?  If you are it will get saved 
>  > as tmp_t.  Since files default to the context of their parent directory.
>  >
>  > If you them mv /tmp/download.file ~/
>  >
>  > You will maintain tmp_t.
>  >
>  > If you use cp /tmp/download.file ~/
>  >
>  > It will get user_home_t.
>  >
>  > Dan
>  >
>  >
>  no I simply download it to a dir in home which is labeled 
>  user_u:object_r:user_home_t 
If you download a large file, can you see it "growing" in your home dir,
or does it appear all at once?

I suspect firefox downloads it to a temp dir and moves it to your home
directory when done.

Paul,

[dragoran]

Paul Howarth wrote:
>  On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
>    
> > Daniel J Walsh wrote:
> >     
> >> dragoran wrote:
> >>       
> >>> When I download a file using firefox it is saved as 
> >>> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> >>> I have a folder which is shared using samba and when I download a 
> >>> file into it I had to restorecon it in order to let the windows 
> >>> clients (and linux) see it.
> >>> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> >>> note: I am using a 32bit firefox build
> >>>
> >>> -- 
> >>> fedora-selinux-list mailing list
> >>> fedora-selinux-list(a)redhat.com
> >>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>>         
> >> Are you saving it to the /tmp directory?  If you are it will get saved 
> >> as tmp_t.  Since files default to the context of their parent directory.
> >>
> >> If you them mv /tmp/download.file ~/
> >>
> >> You will maintain tmp_t.
> >>
> >> If you use cp /tmp/download.file ~/
> >>
> >> It will get user_home_t.
> >>
> >> Dan
> >>
> >>
> >>       
> > no I simply download it to a dir in home which is labeled 
> > user_u:object_r:user_home_t
> >     
>
>  If you download a large file, can you see it "growing" in your home dir,
>  or does it appear all at once?
>
>  I suspect firefox downloads it to a temp dir and moves it to your home
>  directory when done.
>
>  Paul,
>
>
>
>     
yes here I tyred to download a kernel from kernel.org to Desktop:
-rw-------  dragoran dragoran user_u:object_r:tmp_t            
linux-2.6.16.20.tar.bz2.part
(while download was running)
after download it still was tmp_t

[dragoran]

dragoran wrote:
>  Paul Howarth wrote:
> > On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> >  
> >> Daniel J Walsh wrote:
> >>    
> >>> dragoran wrote:
> >>>      
> >>>> When I download a file using firefox it is saved as 
> >>>> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> >>>> I have a folder which is shared using samba and when I download a 
> >>>> file into it I had to restorecon it in order to let the windows 
> >>>> clients (and linux) see it.
> >>>> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> >>>> note: I am using a 32bit firefox build
> >>>>
> >>>> -- 
> >>>> fedora-selinux-list mailing list
> >>>> fedora-selinux-list(a)redhat.com
> >>>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>>>         
> >>> Are you saving it to the /tmp directory?  If you are it will get 
> >>> saved as tmp_t.  Since files default to the context of their parent 
> >>> directory.
> >>>
> >>> If you them mv /tmp/download.file ~/
> >>>
> >>> You will maintain tmp_t.
> >>>
> >>> If you use cp /tmp/download.file ~/
> >>>
> >>> It will get user_home_t.
> >>>
> >>> Dan
> >>>
> >>>
> >>>       
> >> no I simply download it to a dir in home which is labeled 
> >> user_u:object_r:user_home_t
> >>     
> >
> > If you download a large file, can you see it "growing" in your home dir,
> > or does it appear all at once?
> >
> > I suspect firefox downloads it to a temp dir and moves it to your home
> > directory when done.
> >
> > Paul,
> >
> >
> >
> >   
>
>  yes here I tyred to download a kernel from kernel.org to Desktop:
>  -rw-------  dragoran dragoran user_u:object_r:tmp_t            
>  linux-2.6.16.20.tar.bz2.part
>  (while download was running)
>  after download it still was tmp_t 
firefox-bin is lib_t
system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
(don't know if this matters)

[dragoran]

dragoran wrote:
>  dragoran wrote:
> > Paul Howarth wrote:
> >> On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> >>  
> >>> Daniel J Walsh wrote:
> >>>   
> >>>> dragoran wrote:
> >>>>     
> >>>>> When I download a file using firefox it is saved as 
> >>>>> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> >>>>> I have a folder which is shared using samba and when I download a 
> >>>>> file into it I had to restorecon it in order to let the windows 
> >>>>> clients (and linux) see it.
> >>>>> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> >>>>> note: I am using a 32bit firefox build
> >>>>>
> >>>>> -- 
> >>>>> fedora-selinux-list mailing list
> >>>>> fedora-selinux-list(a)redhat.com
> >>>>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>>>>         
> >>>> Are you saving it to the /tmp directory?  If you are it will get 
> >>>> saved as tmp_t.  Since files default to the context of their 
> >>>> parent directory.
> >>>>
> >>>> If you them mv /tmp/download.file ~/
> >>>>
> >>>> You will maintain tmp_t.
> >>>>
> >>>> If you use cp /tmp/download.file ~/
> >>>>
> >>>> It will get user_home_t.
> >>>>
> >>>> Dan
> >>>>
> >>>>
> >>>>       
> >>> no I simply download it to a dir in home which is labeled 
> >>> user_u:object_r:user_home_t
> >>>     
> >>
> >> If you download a large file, can you see it "growing" in your home 
> >> dir,
> >> or does it appear all at once?
> >>
> >> I suspect firefox downloads it to a temp dir and moves it to your home
> >> directory when done.
> >>
> >> Paul,
> >>
> >>
> >>
> >>   
> >
> > yes here I tyred to download a kernel from kernel.org to Desktop:
> > -rw-------  dragoran dragoran user_u:object_r:tmp_t            
> > linux-2.6.16.20.tar.bz2.part
> > (while download was running)
> > after download it still was tmp_t
>
>  firefox-bin is lib_t
>  system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
>  (don't know if this matters)
>
>  
still not fixed with lastest updates...
any idea why the context of the files is forced to tmp_t ?

[Daniel J Walsh]

dragoran wrote:
>  dragoran wrote:
> > dragoran wrote:
> >> Paul Howarth wrote:
> >>> On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> >>>  
> >>>> Daniel J Walsh wrote:
> >>>>  
> >>>>> dragoran wrote:
> >>>>>    
> >>>>>> When I download a file using firefox it is saved as 
> >>>>>> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> >>>>>> I have a folder which is shared using samba and when I download 
> >>>>>> a file into it I had to restorecon it in order to let the 
> >>>>>> windows clients (and linux) see it.
> >>>>>> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> >>>>>> note: I am using a 32bit firefox build
> >>>>>>
> >>>>>> -- 
> >>>>>> fedora-selinux-list mailing list
> >>>>>> fedora-selinux-list(a)redhat.com
> >>>>>> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >>>>>>         
> >>>>> Are you saving it to the /tmp directory?  If you are it will get 
> >>>>> saved as tmp_t.  Since files default to the context of their 
> >>>>> parent directory.
> >>>>>
> >>>>> If you them mv /tmp/download.file ~/
> >>>>>
> >>>>> You will maintain tmp_t.
> >>>>>
> >>>>> If you use cp /tmp/download.file ~/
> >>>>>
> >>>>> It will get user_home_t.
> >>>>>
> >>>>> Dan
> >>>>>
> >>>>>
> >>>>>       
> >>>> no I simply download it to a dir in home which is labeled 
> >>>> user_u:object_r:user_home_t
> >>>>     
> >>>
> >>> If you download a large file, can you see it "growing" in your home
>
> >>> dir,
> >>> or does it appear all at once?
> >>>
> >>> I suspect firefox downloads it to a temp dir and moves it to your home
> >>> directory when done.
> >>>
> >>> Paul,
> >>>
> >>>
> >>>
> >>>   
> >>
> >> yes here I tyred to download a kernel from kernel.org to Desktop:
> >> -rw-------  dragoran dragoran user_u:object_r:tmp_t            
> >> linux-2.6.16.20.tar.bz2.part
> >> (while download was running)
> >> after download it still was tmp_t
> >
> > firefox-bin is lib_t
> > system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
> > (don't know if this matters)
> >
> >
>
>  still not fixed with lastest updates...
>  any idea why the context of the files is forced to tmp_t ? 
I am not sure we can fix
this without modifying firefox.  Is this 
happening on smaller files that you download?
I do not see this behaviour on my machine.