From: martin@martinorr.name (Martin Orr)
To: refpolicy@oss.tresys.com
Subject: [refpolicy] ubac policy: /root label
Date: Tue, 11 Nov 2008 18:18:24 +0000 [thread overview]
Message-ID: <4919CC70.7010107@martinorr.name> (raw)
I have just upgraded to a ubac policy now /root is labelled as default_t.
It used to be unconfined_home_dir_t. I don't know whether this is a policy
issue or because I have too old libsemanage (2.0.25) or because I have silly
user mappings.
Here are my user mappings (I think these are just the defaults):
martin at caligula:~/selinux/refpolicy/quilt$ sudo semanage user -l
Labeling MLS/ MLS/
SELinux User Prefix MCS Level MCS Range SELinux Roles
root sysadm s0 s0-s0:c0.c1023 staff_r sysadm_r system_r
staff_u staff s0 s0-s0:c0.c1023 staff_r sysadm_r
sysadm_u sysadm s0 s0-s0:c0.c1023 sysadm_r
system_u user s0 s0-s0:c0.c1023 system_r
unconfined_u unconfined s0 s0-s0:c0.c1023 system_r unconfined_r
user_u user s0 s0 user_r
martin at caligula:~/selinux/refpolicy/quilt$ sudo semanage login -l
Login Name SELinux User MLS/MCS Range
__default__ unconfined_u s0-s0:c0.c1023
root unconfined_u s0-s0:c0.c1023
system_u system_u s0-s0:c0.c1023
--
Martin Orr
next reply other threads:[~2008-11-11 18:18 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-11-11 18:18 Martin Orr [this message]
2008-11-12 13:10 ` [refpolicy] ubac policy: /root label Christopher J. PeBenito
2008-11-13 17:55 ` Martin Orr
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=4919CC70.7010107@martinorr.name \
--to=martin@martinorr.name \
--cc=refpolicy@oss.tresys.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.