ssh by user amandabackup [SOLVED]
Daniel J Walsh
dwalsh at redhat.com
Tue Jan 4 20:19:28 UTC 2011
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 01/04/2011 11:54 AM, Matthew Saltzman wrote:
> On Tue, 2011-01-04 at 11:45 -0500, Daniel J Walsh wrote:
>> You would need the combination of relabeling the homedir and searching
>> /var/lib/amanda.
>>
>> WHich is what we will be adding to policy.
>
> Ah, I don't think that was in your earlier message. If the policy is
> published someplace, I'd be happy to test.
>
> One question: How does a regular user's .ssh directory get relabeled?
>
Restorecon. Or by transition.
If you use ssh-copy-id, selinux/sshd will created the files with the
correct labeling.
If a user logged into the console via X does mkdir ~/.ssh, restorecond
will watch for the creation of the directory and label it correctly. If
the user does it via ssh/mkdir .ssh, it will be mislabeled, until they
run restorecon on it.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/
iEYEARECAAYFAk0jgNAACgkQrlYvE4MpobMskQCggIMPvtF5gRVEbEYWaAaAiC70
ZfsAnRkoOoJksZ1tN6cSUdJEnZPjqh0l
=uvqc
-----END PGP SIGNATURE-----
More information about the users
mailing list