Research
.
Skip Search Box

SELinux Mailing List

Re: [PATCH] Add users.fc to policy

From: Stephen Smalley <sds_at_epoch.ncsc.mil>
Date: Fri, 23 Jan 2004 12:50:11 -0500


On Fri, 2004-01-23 at 12:34, Stephen Smalley wrote:
> If you look at Dan's policy RPM (as well as our sourceforge CVS tree),
> you'll see that the user entries for non-user_r users are now generated
> automatically via a script. The /root entries are still in the base .fc
> files, since they are static, but the jadmin example entries have been
> removed and if any staff user listed in policy/users will automatically
> have appropriate entries created when file_contexts is built.

Also, note that there are user home directory entries in some of the program .fc files, e.g. for files related to specific programs that have their own type such as $HOME/.ssh and $HOME/.gnupg. Dan's script handles these entries as well for staff users, while letting the default type stay in the program .fc file.

-- 
Stephen Smalley <sds@epoch.ncsc.mil>
National Security Agency


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.
Received on Fri 23 Jan 2004 - 12:50:38 EST
 

Date Posted: Jan 15, 2009 | Last Modified: Jan 15, 2009 | Last Reviewed: Jan 15, 2009

 
bottom

National Security Agency / Central Security Service