Did cert_t go away for /var/named/chroot/etc/pki?

Miroslav Grepl mgrepl at redhat.com
Mon Aug 3 08:27:41 UTC 2009


On 08/03/2009 01:03 AM, Edward Kuns wrote:
> Due to the problems I've described recently, I fully reloaded my selinux
> policy and finally did a full relabel.  During this relabel, I saw
> things such as the following:
>
> restorecon
> reset /var/named/chroot/etc/pki/dnssec-keys/harvest/time.gov.conf
> context system_u:object_r:cert_t:s0->system_u:object_r:etc_t:s0
>
> and when I run system-config-selinux and go to "File labeling" and
> search for pki, indeed I only see pki in the two following file specs:
>
>      /etc/pki(/.*)?
>      /etc/pki/dovecot(/.*)?
>
> The policy currently installed is:
>
> selinux-policy-3.6.12-69.fc11.noarch
> selinux-policy-targeted-3.6.12-69.fc11.noarch
>
> Am I missing something?  Is this an expected change?
>
>             Thanks
>
>                Eddie
>
> --
> fedora-selinux-list mailing list
> fedora-selinux-list at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-selinux-list
>    
Eddie,

I have a fix for this in selinux-policy-3.6.12-72.fc11

Regards,
Miroslav




More information about the fedora-selinux-list mailing list