selinux-policy-targeted

Nathanael D. Noblet nathanael at gnat.ca
Thu Mar 13 22:23:06 UTC 2008


Daniel J Walsh wrote:

> One you have a service account in /etc/passwd or NIS which has a homedir
> in /opt.  SELinux has mistakenly seen this as a login account, because
> the account has a UID > 500 and a valid shell.  If you change the shell
> to /sbin/nologin or /bin/false and run genhomedircon, the duplicate file
> context will go away.

That was totally correct. I have some non-fedora packaged software 
installed there (created by a self made RPM). Changing the shell got rid 
of the issue. I wonder if they still work though ;).




More information about the fedora-devel-list mailing list