polyinstantiation of the /tmp dir
tmraz at redhat.com
Thu May 15 07:41:40 UTC 2008
On Wed, 2008-05-14 at 16:11 -0700, Clarkson, Mike R (US SSA) wrote:
> I'm having a problem setting up polyinstantiation for the /tmp dir. I'm
> using RHEL5.1 and I've set it up to create instance directories under
> the /tmp-inst directory based on level when using newrole. It works, but
> the instance directory has ownership/permissions (dac permissions) set
> so that the user can not write to the polyinstantiated directory
> #ls -l /tmp-inst/
> total 24
> drwxr-xr-x 2 root root 4096 May 14 20:17
> drwxr-xr-x 2 root root 4096 May 14 18:40
> Either the directories need to be created with the user as the owner
> (clarkson in this case), or the permissions need to be 777.
> I've set this up before on other boxes and had it work. Not sure what
> the difference is now. Any ideas?
Remove the instances and add debug option to the pam_namespace.so. Do
you see anything suspicious in /var/log/secure? Also what ls -ld /tmp
says? The permissions should be copied from the polydir.
No matter how far down the wrong road you've gone, turn back.
More information about the fedora-selinux-list