Ordering of file context choices?
Robin Lee Powell
rlpowell at digitalkingdom.org
Mon Sep 5 02:49:48 UTC 2011
I have a custom module installed that is supposed to set file
contexts for some stuff in a user's homedir (the CGI application I
mentioned in my last email, that I want the user to be able to
administer):
/etc/selinux/targeted/modules/active/file_contexts.template
1953:/home/melbi/bpfk_corpus(/.*)? system_u:object_r:lojban_corpus_t:s0
2179:/home/melbi/public_html/cgi-bin/corpus.cgi system_u:object_r:lojban_corpus_t:s0
/etc/selinux/targeted/modules/active/file_contexts
1883:/home/melbi/bpfk_corpus(/.*)? system_u:object_r:lojban_corpus_t:s0
2101:/home/melbi/public_html/cgi-bin/corpus.cgi system_u:object_r:lojban_corpus_t:s0
/etc/selinux/targeted/contexts/files/file_contexts
1883:/home/melbi/bpfk_corpus(/.*)? system_u:object_r:lojban_corpus_t:s0
2101:/home/melbi/public_html/cgi-bin/corpus.cgi system_u:object_r:lojban_corpus_t:s0
This doesn't appear to actually *work*; as far as I can tell the
contexts for the home directory itself are winning:
rlpowell at vrici> ls -lZ ~melbi/bpfk_corpus
drwxrwxrwx. melbi melbi user_u:object_r:user_home_t:s0 files/
-rw-r--r--. melbi melbi user_u:object_r:user_home_t:s0 selmaho.txt
drwxrwxrwx. melbi melbi user_u:object_r:user_home_t:s0 tmp/
-rw-r--r--. apache apache user_u:object_r:user_home_t:s0 urls.db
-rw-rw-rw-. melbi melbi user_u:object_r:user_home_t:s0 urls.not.db
(that's after a restorecon)
Can I do anything to change that?
-Robin
--
http://singinst.org/ : Our last, best hope for a fantastic future.
Lojban (http://www.lojban.org/): The language in which "this parrot
is dead" is "ti poi spitaki cu morsi", but "this sentence is false"
is "na nei". My personal page: http://www.digitalkingdom.org/rlp/
More information about the selinux
mailing list