firefox downloaded files are user_u:object_r:tmp_t

[dragoran]

When I download a file using firefox it is saved as 
user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
I have a folder which is shared using samba and when I download a file 
into it I had to restorecon it in order to let the windows clients (and 
linux) see it.
I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
note: I am using a 32bit firefox build

[Daniel J Walsh]

dragoran wrote:
> When I download a file using firefox it is saved as 
> user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> I have a folder which is shared using samba and when I download a file 
> into it I had to restorecon it in order to let the windows clients 
> (and linux) see it.
> I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> note: I am using a 32bit firefox build
>
> -- 
> fedora-selinux-list mailing list
> [e-mail]
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list

Are you saving it to the /tmp directory?  If you are it will get saved 
as tmp_t.  Since files default to the context of their parent directory.

If you them mv /tmp/download.file ~/

You will maintain tmp_t.

If you use cp /tmp/download.file ~/

It will get user_home_t.

Dan

[dragoran]

Daniel J Walsh wrote:
> dragoran wrote:
> > When I download a file using firefox it is saved as 
> > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > I have a folder which is shared using samba and when I download a 
> > file into it I had to restorecon it in order to let the windows 
> > clients (and linux) see it.
> > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > note: I am using a 32bit firefox build
> >
> > -- 
> > fedora-selinux-list mailing list
> > [e-mail]
> > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>
> Are you saving it to the /tmp directory?  If you are it will get saved 
> as tmp_t.  Since files default to the context of their parent directory.
>
> If you them mv /tmp/download.file ~/
>
> You will maintain tmp_t.
>
> If you use cp /tmp/download.file ~/
>
> It will get user_home_t.
>
> Dan

no I simply download it to a dir in home which is labeled 
user_u:object_r:user_home_t

[Paul Howarth]

On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> Daniel J Walsh wrote:
> > dragoran wrote:
> > > When I download a file using firefox it is saved as 
> > > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > > I have a folder which is shared using samba and when I download a 
> > > file into it I had to restorecon it in order to let the windows 
> > > clients (and linux) see it.
> > > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > > note: I am using a 32bit firefox build
> > >
> > > -- 
> > > fedora-selinux-list mailing list
> > > [e-mail]
> > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> >
> > Are you saving it to the /tmp directory?  If you are it will get saved 
> > as tmp_t.  Since files default to the context of their parent directory.
> >
> > If you them mv /tmp/download.file ~/
> >
> > You will maintain tmp_t.
> >
> > If you use cp /tmp/download.file ~/
> >
> > It will get user_home_t.
> >
> > Dan
>
> no I simply download it to a dir in home which is labeled 
> user_u:object_r:user_home_t

If you download a large file, can you see it "growing" in your home dir,
or does it appear all at once?

I suspect firefox downloads it to a temp dir and moves it to your home
directory when done.

Paul,

[dragoran]

Paul Howarth wrote:
> On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> > Daniel J Walsh wrote:
> > > dragoran wrote:
> > > > When I download a file using firefox it is saved as 
> > > > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > > > I have a folder which is shared using samba and when I download a 
> > > > file into it I had to restorecon it in order to let the windows 
> > > > clients (and linux) see it.
> > > > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > > > note: I am using a 32bit firefox build
> > > >
> > > > -- 
> > > > fedora-selinux-list mailing list
> > > > [e-mail]
> > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> > >
> > > Are you saving it to the /tmp directory?  If you are it will get saved 
> > > as tmp_t.  Since files default to the context of their parent directory.
> > >
> > > If you them mv /tmp/download.file ~/
> > >
> > > You will maintain tmp_t.
> > >
> > > If you use cp /tmp/download.file ~/
> > >
> > > It will get user_home_t.
> > >
> > > Dan
> >
> > no I simply download it to a dir in home which is labeled 
> > user_u:object_r:user_home_t
>
> If you download a large file, can you see it "growing" in your home dir,
> or does it appear all at once?
>
> I suspect firefox downloads it to a temp dir and moves it to your home
> directory when done.
>
> Paul,

yes here I tyred to download a kernel from kernel.org to Desktop:
-rw-------  dragoran dragoran user_u:object_r:tmp_t            
linux-2.6.16.20.tar.bz2.part
(while download was running)
after download it still was tmp_t

[dragoran]

dragoran wrote:
> Paul Howarth wrote:
> > On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> > > Daniel J Walsh wrote:
> > > > dragoran wrote:
> > > > > When I download a file using firefox it is saved as 
> > > > > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > > > > I have a folder which is shared using samba and when I download a 
> > > > > file into it I had to restorecon it in order to let the windows 
> > > > > clients (and linux) see it.
> > > > > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > > > > note: I am using a 32bit firefox build
> > > > >
> > > > > -- 
> > > > > fedora-selinux-list mailing list
> > > > > [e-mail]
> > > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> > > >
> > > > Are you saving it to the /tmp directory?  If you are it will get 
> > > > saved as tmp_t.  Since files default to the context of their parent 
> > > > directory.
> > > >
> > > > If you them mv /tmp/download.file ~/
> > > >
> > > > You will maintain tmp_t.
> > > >
> > > > If you use cp /tmp/download.file ~/
> > > >
> > > > It will get user_home_t.
> > > >
> > > > Dan
> > >
> > > no I simply download it to a dir in home which is labeled 
> > > user_u:object_r:user_home_t
> >
> > If you download a large file, can you see it "growing" in your home dir,
> > or does it appear all at once?
> >
> > I suspect firefox downloads it to a temp dir and moves it to your home
> > directory when done.
> >
> > Paul,
>
> yes here I tyred to download a kernel from kernel.org to Desktop:
> -rw-------  dragoran dragoran user_u:object_r:tmp_t            
> linux-2.6.16.20.tar.bz2.part
> (while download was running)
> after download it still was tmp_t

firefox-bin is lib_t
system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
(don't know if this matters)

[dragoran]

dragoran wrote:
> dragoran wrote:
> > Paul Howarth wrote:
> > > On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> > > > Daniel J Walsh wrote:
> > > > > dragoran wrote:
> > > > > > When I download a file using firefox it is saved as 
> > > > > > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > > > > > I have a folder which is shared using samba and when I download a 
> > > > > > file into it I had to restorecon it in order to let the windows 
> > > > > > clients (and linux) see it.
> > > > > > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > > > > > note: I am using a 32bit firefox build
> > > > > >
> > > > > > -- 
> > > > > > fedora-selinux-list mailing list
> > > > > > [e-mail]
> > > > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> > > > >
> > > > > Are you saving it to the /tmp directory?  If you are it will get 
> > > > > saved as tmp_t.  Since files default to the context of their 
> > > > > parent directory.
> > > > >
> > > > > If you them mv /tmp/download.file ~/
> > > > >
> > > > > You will maintain tmp_t.
> > > > >
> > > > > If you use cp /tmp/download.file ~/
> > > > >
> > > > > It will get user_home_t.
> > > > >
> > > > > Dan
> > > >
> > > > no I simply download it to a dir in home which is labeled 
> > > > user_u:object_r:user_home_t
> > >
> > > If you download a large file, can you see it "growing" in your home 
> > > dir,
> > > or does it appear all at once?
> > >
> > > I suspect firefox downloads it to a temp dir and moves it to your home
> > > directory when done.
> > >
> > > Paul,
> >
> > yes here I tyred to download a kernel from kernel.org to Desktop:
> > -rw-------  dragoran dragoran user_u:object_r:tmp_t            
> > linux-2.6.16.20.tar.bz2.part
> > (while download was running)
> > after download it still was tmp_t
>
> firefox-bin is lib_t
> system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
> (don't know if this matters)

still not fixed with lastest updates...
any idea why the context of the files is forced to tmp_t ?

[Daniel J Walsh]

dragoran wrote:
> dragoran wrote:
> > dragoran wrote:
> > > Paul Howarth wrote:
> > > > On Fri, 2006-06-09 at 20:15 +0200, dragoran wrote:
> > > > > Daniel J Walsh wrote:
> > > > > > dragoran wrote:
> > > > > >
> > > > > > > When I download a file using firefox it is saved as 
> > > > > > > user_u:object_r:tmp_t it should be user_u:object_r:user_home_t
> > > > > > > I have a folder which is shared using samba and when I download 
> > > > > > > a file into it I had to restorecon it in order to let the 
> > > > > > > windows clients (and linux) see it.
> > > > > > > I am using FC5 x86_64 with selinux-policy-targeted-2.2.40-1.fc5
> > > > > > > note: I am using a 32bit firefox build
> > > > > > >
> > > > > > > -- 
> > > > > > > fedora-selinux-list mailing list
> > > > > > > [e-mail]
> > > > > > > https://www.redhat.com/mailman/listinfo/fedora-selinux-list
> > > > > > >         
> > > > > > Are you saving it to the /tmp directory?  If you are it will get 
> > > > > > saved as tmp_t.  Since files default to the context of their 
> > > > > > parent directory.
> > > > > >
> > > > > > If you them mv /tmp/download.file ~/
> > > > > >
> > > > > > You will maintain tmp_t.
> > > > > >
> > > > > > If you use cp /tmp/download.file ~/
> > > > > >
> > > > > > It will get user_home_t.
> > > > > >
> > > > > > Dan
> > > > >
> > > > > no I simply download it to a dir in home which is labeled 
> > > > > user_u:object_r:user_home_t
> > > >
> > > > If you download a large file, can you see it "growing" in your home 
> > > > dir,
> > > > or does it appear all at once?
> > > >
> > > > I suspect firefox downloads it to a temp dir and moves it to your home
> > > > directory when done.
> > > >
> > > > Paul,
> > >
> > > yes here I tyred to download a kernel from kernel.org to Desktop:
> > > -rw-------  dragoran dragoran user_u:object_r:tmp_t            
> > > linux-2.6.16.20.tar.bz2.part
> > > (while download was running)
> > > after download it still was tmp_t
> >
> > firefox-bin is lib_t
> > system_u:object_r:lib_t          /usr/lib/firefox-1.5.0.3/firefox-bin
> > (don't know if this matters)
>
> still not fixed with lastest updates...
> any idea why the context of the files is forced to tmp_t ?

I am not sure we can fix this without modifying firefox.  Is this 
happening on smaller files that you download?
I do not see this behaviour on my machine.