Polyinstantiated directory instance name bug?

Joe Nall joe at nall.com
Sun Jun 25 17:55:31 UTC 2006


I added the following line to the end of /etc/pam.d/[login,sshd,su]
session    required     pam_namespace.so debug

I added the following line to /etc/security/namespace.conf
/var/polyinstantiated /var/polyinstantiated/polyinstantiated- 
inst/      context      root,adm

If I ssh to test at localhost and touch /var/polyinstantiated/foo I get

cd /var
[root at cipso var]# ls -lR polyinstantiated/
polyinstantiated/:
total 20
d--------- 3 root    root    4096 Jun 23 18:32 polyinstantiated-inst

polyinstantiated/polyinstantiated-inst:
total 8
drwxrwxrwx 2 root root 4096 Jun 23 18:41 test

polyinstantiated/polyinstantiated-inst/test:
total 8
-rw-rw-r-- 1 test test 0 Jun 23 18:41 bar
-rw-rw-r-- 1 test test 0 Jun 23 18:35 foo

Shouldn't the instance name be the context instead of the username  
(test)?

joe





More information about the fedora-selinux-list mailing list