Re: /var/tmp/host_0 context getting set to initrc_tmp_t

[Jason L Tibbitts III]

> You don't want to leave daemons running in initrc_t.  So you want
> to put kpropd into a domain, whether an existing one (if something similar in purpose and
> required accesses exists) or a new one, and then you can
> ensure that the file will get the right type when created. 
Well, I undeestand what you're saying, but I'm just using the stock F8 policy.  Is
this bugzilla-worthy?

/var/tmp/host_0 context getting set to initrc_tmp_t

[Stephen Smalley]

On Thu, 2008-03-06 at 10:34 -0600, Jason Tibbitts wrote:
>  >You don't want to leave daemons running in initrc_t.  So you
> want to put kpropd into a domain, whether an existing one (if something similar in purpose
> and required accesses exists) or a new one, and then you can
>  >ensure that the file will get the right type when created.
>  
>  Well, I undeestand what you're saying, but I'm just using the stock F8 policy. 
> Is this bugzilla-worthy? 
Yes, I would say so.

-- 
Stephen Smalley
National Security Agency