restorecond not expanding ~

[Stephen Smalley]

On Tue, 2007-11-20 at 13:50 -0700, Forrest Taylor wrote:
> I am using RHEL5.1 selinux-policy-targeted-2.4.6-104.el5.  restorecond
> is not properly expanding the ~ or other wildcards
> in /etc/selinux/restorecond.conf.  By default, restorecond.conf
> includes:
> ~/public_html
> 
> However, if I create that directory as a normal user, it gets the
> standard context (user_home_t).  If I explicitly put the full path
> (e.g., /home/student/public_html), it works as expected.
> 
> Does (or will) restorecond support wildcards/regex?

Wildcards/regex, no.   Tilde should be expanded to user home directories
for users presently logged in to the system (based on utmp).

Try running it with -d -v.

-- 
Stephen Smalley
National Security Agency