From: Daniel J Walsh <dwalsh@redhat.com>
To: Stephen Smalley <sds@epoch.ncsc.mil>
Cc: SE Linux <selinux@tycho.nsa.gov>, Nalin Dahyabhai <nalin@redhat.com>
Subject: Re: Rewrite of genhomedircon
Date: Thu, 10 Feb 2005 17:01:00 -0500 [thread overview]
Message-ID: <420BD99C.8050508@redhat.com> (raw)
In-Reply-To: <1108071785.22172.270.camel@moss-spartans.epoch.ncsc.mil>
Stephen Smalley wrote:
>On Thu, 2005-02-10 at 15:35, Daniel J Walsh wrote:
>
>
>>genhomedircon will generate only one HOME_ROOT based off the location in
>>the /etc/default/useradd.
>>
>>
>
>Is this limitation (to a single HOME_ROOT) going to be a problem in
>practice?
>
>
>
It is causing problems in other unexpected ways. We are seeing
potential conflicts
where a user account gets created say on /var/ and now we end up with
/var being labeled
home_root_t. The reason for having home_root_t is so that directories
that get created under
it will automatically get created with the correct context. We have
also seen conflicts where
users create some directories in /home and /home/devel where they could
conflict.
Dan
--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
prev parent reply other threads:[~2005-02-10 22:01 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2005-02-10 20:35 Rewrite of genhomedircon Daniel J Walsh
2005-02-10 21:43 ` Stephen Smalley
2005-02-10 22:01 ` Daniel J Walsh [this message]
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=420BD99C.8050508@redhat.com \
--to=dwalsh@redhat.com \
--cc=nalin@redhat.com \
--cc=sds@epoch.ncsc.mil \
--cc=selinux@tycho.nsa.gov \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.