FC5: Problem with acroread and CISCO VPN

[Stephan Groß]

On Friday 28 April 2006 12:22, Paul Howarth wrote:

> >>> I have the above mentioned selinux-policy-2.2.34-3.fc5 installed.
> >>> However, a "restorecon -vR /usr/local/Adobe" results in
> >>>
> >>> "/etc/selinux/targeted/contexts/files/file_contexts: Multiple different
> >>> specifications for /opt  (system_u:object_r:home_root_t and
> >>> system_u:object_r:usr_t).
> >>> /etc/selinux/targeted/contexts/files/file_contexts: Multiple different
> >>> specifications for /opt  (system_u:object_r:home_root_t and
> >>> system_u:object_r:usr_t)."
> >>
> >> Have you moved root's home directory from /root to somewhere under /opt?
> >
> > No, its still in /root. I only have the Brockhaus Multimedia Encyclopedia
> > (the german answer to MS Encarte) installed that registers a user bmm
> > having its home directory in /opt/bmm. However, I just checked that /opt
> > is of type home_root_t and all of its subdirectories are of type
> > user_home_dir_t. Should I change any of these settings?
>
> Moving its home directory to somewhere under /home might help.

I finally found a solution for that issue. Changing the bmm users login shell 
to /sbin/nologin (he must not login anyway) did the trick. Then I ran 
a /usr/sbin/genhomedircon to generate a 
new /etc/selinux/targeted/contexts/files/file_contexts.homedirs. Now Adobe 
Acroread works like a charm (using selinux-policy-targeted-2.2.36-2.fc5).

Stephan.