SElinux concerning symlink?

[Mike]

Craig White <craigwhite <at> azapple.com> writes:

> $ ls -lZ /home/craig/.ssh
> -rw-------  craig craig user_u:object_r:user_home_t
> client.id_dsa.key
> -rw-------  craig craig user_u:object_r:user_home_t      id_dsa
> -rw-rw-r--  craig craig unconfined_u:object_r:user_home_t
> id_dsa.keystore
> -rw-r--r--  craig craig unconfined_u:object_r:user_home_t id_dsa.pub
> -rw-------  craig craig unconfined_u:object_r:user_home_t id_rsa
> -rw-rw-r--  craig craig unconfined_u:object_r:user_home_t
> id_rsa.keystore
> -rw-r--r--  craig craig unconfined_u:object_r:user_home_t id_rsa.pub
> -rw-------  craig craig user_u:object_r:user_home_t      known_hosts
> 
> but the issue of policy is that these are not the settings these files
> would get if they were located in /opt.

Craig

I just changed the contexts to type user_home_t for the files in .ssh
and this fixed the issue!

Your last listing of the contexts was the crucial one - 
This is excellent and thanks again for your help - I'll sleep easier
tonight!