<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type"> <title></title> </head> <body bgcolor="#ffffff" text="#000000"> Ivan Gyurdiev wrote: <blockquote cite="mid1114579036.18640.13.camel@localhost.localdomain" type="cite"> <blockquote type="cite"> <pre wrap="">-rw-r--r-- smearp smearp user_u:object_r:user_home_t flashplayer.xpt -rwxr-xr-x smearp smearp user_u:object_r:texrel_shlib_t </pre> </blockquote> <pre wrap=""> This is correct, but it's not done automatically, because /home is entirely skipped when changing the contexts after a policy upgrade. Personally, I think this is a major problem, but Daniel Walsh points out that (1) automatic restorecon on /home presents a security risk of mislabeled files ( like gpg keys and such in the wrong place), and (2) automatic restorecon on /home might take a very long time. I think if we are to introduce more fine-grained labeling of "$HOME" in the future (which we should), this problem needs to be solved somehow. </pre> </blockquote> This is now bug: <a class="moz-txt-link-freetext" href="https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=151870">https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=151870</a> The problem is apparently the fact that RPM does not support the latest version of matchpathcon, which allows for local customizations of homdircontext... (and as such, the incorrect security context is being set up for the /home directory during the initial OS load) Hopefully this can be fixed in time for the FC4 release! -Sean </body> </html>