Re: Attaching multiple user accounts to same home directory...

[Daniel J Walsh <dwalsh@redhat.com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hasan Rezaul-CHR010 wrote:
> Hi All,
> 
> Suppose I wanted to have several Linux User Accounts tied to the same
> Home Directory, by executing the following:
> 
> useradd -g wadm -d /home/admin admin1
> useradd -g wadm -d /home/admin admin2
> 
> And I wanted all these Linux Users to be tied to the same SELinux user
> (staff_u) as follows:
> 
> semanage login -a -s staff_u admin1
> semanage login -a -s staff_u admin2
> 
> Does SELinux allow this per design ???
> 
> Currently I am getting the following errors on my console, which
> somewhat makes sense, considering this is NOT standard practise! 
> 
> 
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/.+.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/.*/plugins/nprhapengine\.so.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/.*/plugins/libflashplayer\.so.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.ssh(/.*)?.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.xauth.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.gnupg(/.+)?.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.fonts(/.*)?.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.gconf(d)?(/.*)?.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for
> /home/admin/\.mozilla(/.*)?/plugins/libflashplayer\.so.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.Xauthority.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.fonts/auto(/.*)?.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.config/gtk-.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.fonts\.cache-.*.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.ICEauthority.*.
> Inserting powerspanii.ko:
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin.
> /etc/selinux/strict/contexts/files/file_contexts: Multiple same
> specifications for /home/admin/\.fonts\.conf.
> 
> 
> I was wondering if there is any way I can tweak SELinux config or policy
> to allow  multiple Linux users to share the same home
> directory...without generating all these complaints ?  Thanks in advance
> for your help  :-)
> 
> - Rezaul.
> 
> 
> --
> This message was distributed to subscribers of the selinux mailing list.
> If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
> the words "unsubscribe selinux" without quotes as the message.
I think you have confused the tool.  What OS are you doing this on?
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAkh/lhAACgkQrlYvE4MpobNVggCeMLFXrNd5m+I9HEYn8qGJifgD
+GEAn3jcHDwH2RSQx3NDNgiFYqz8+xev
=4Jln
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.