ssh by user amandabackup [SOLVED]

[Matthew Saltzman]

On Tue, 2011-01-04 at 15:19 -0500, Daniel J Walsh wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On 01/04/2011 11:54 AM, Matthew Saltzman wrote:
> > On Tue, 2011-01-04 at 11:45 -0500, Daniel J Walsh wrote: 
> >> You would need the combination of relabeling the homedir and searching
> >> /var/lib/amanda.
> >>
> >> WHich is what we will be adding to policy.
> > 
> > Ah, I don't think that was in your earlier message.  If the policy is
> > published someplace, I'd be happy to test.
> > 
> > One question: How does a regular user's .ssh directory get relabeled?
> > 
> Restorecon.  Or by transition.
> 
> If you use ssh-copy-id, selinux/sshd will created the files with the
> correct labeling.
> 
> If a user logged into the console via X does mkdir ~/.ssh, restorecond
> will watch for the creation of the directory and label it correctly.  If
> the user does it via ssh/mkdir .ssh, it will be mislabeled, until they
> run restorecon on it.

OK Thanks.  That provides some insight I didn't have.
-- 
                Matthew Saltzman

Clemson University Math Sciences
mjs AT clemson DOT edu
http://www.math.clemson.edu/~mjs
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.fedoraproject.org/pipermail/users/attachments/20110104/70748155/attachment.html