file_contexts.homedirs and new users

[Klaus Lichtenwalder]

Hi,

I just stumbled about the effect that adding a new user and creating a
.ssh directory does not automatically fix its context though it's listed
in file_contexts.homedirs (this was done via unattended package
installs). It is fixed by an explicit restorecon, though.
 I searched google up and down and did not find how/when the
homedirs-File gets applied. Restorecon explicitely used sets the context
to home_ssh_t and everything is fine. So sorry if I missed something
obvious, but I just don't get how and when the policy from
file_contexts.homedirs gets applied
(it's on an up to date F12 system)

Klaus

-- 
------------------------------------------------------------------------ 
 Klaus Lichtenwalder, Dipl. Inform.,  http://lklaus.homelinux.org/Klaus/
 PGP Key fingerprint: BF52 72FA 1F5A 1E29 C0F8  498C C4C6 633C 2821 97DA

[Bruno Wolff III]

On Wed, Apr 07, 2010 at 20:42:23 +0200,
  Klaus Lichtenwalder <k.lichtenwalder(a)computer.org&gt; wrote:
>  Hi,
>  
>  I just stumbled about the effect that adding a new user and creating a
>  .ssh directory does not automatically fix its context though it's listed
>  in file_contexts.homedirs (this was done via unattended package
>  installs). It is fixed by an explicit restorecon, though.
>   I searched google up and down and did not find how/when the
>  homedirs-File gets applied. Restorecon explicitely used sets the context
>  to home_ssh_t and everything is fine. So sorry if I missed something
>  obvious, but I just don't get how and when the policy from
>  file_contexts.homedirs gets applied
>  (it's on an up to date F12 system) 
The file context information only gets used when relabelling.
The context of new created files and directories depends on the context of
the directory they are being created in and the context of the process
doing the creation and any manual overrides made by the creating process.

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04/07/2010 02:43 PM, Bruno Wolff III wrote:
>  On Wed, Apr 07, 2010 at 20:42:23 +0200,
>    Klaus Lichtenwalder <k.lichtenwalder(a)computer.org&gt; wrote:
> > Hi,
> >
> > I just stumbled about the effect that adding a new user and creating a
> > .ssh directory does not automatically fix its context though it's listed
> > in file_contexts.homedirs (this was done via unattended package
> > installs). It is fixed by an explicit restorecon, though.
> >  I searched google up and down and did not find how/when the
> > homedirs-File gets applied. Restorecon explicitely used sets the context
> > to home_ssh_t and everything is fine. So sorry if I missed something
> > obvious, but I just don't get how and when the policy from
> > file_contexts.homedirs gets applied
> > (it's on an up to date F12 system)
>  
>  The file context information only gets used when relabelling.
>  The context of new created files and directories depends on the context of
>  the directory they are being created in and the context of the process
>  doing the creation and any manual overrides made by the creating process.
>  --
>  selinux mailing list
>  selinux(a)lists.fedoraproject.org
>  https://admin.fedoraproject.org/mailman/listinfo/selinux
>  
>   
You can use the restorecond service if you want to watch for the
creation of certain files.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.14 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
>
> iEYEARECAAYFAku9scEACgkQrlYvE4MpobMWaQCgrG6jLm8rDqLCuX5hc7HnpbET
> lqsAoK26M+7gYSfWoImDMJcgfDF8lpR+
> =NjGl
> -----END PGP SIGNATURE-----