selinux adventures/troubles

[Jan Pazdziora]

On Sat, Dec 27, 2008 at 04:26:13PM -0700, Michal Jaegermann wrote:
> On Sat, Dec 27, 2008 at 07:43:40PM +0100, Jan Pazdziora wrote:
> > On Sat, Dec 27, 2008 at 10:23:13AM -0700, Michal Jaegermann wrote:
> > > 
> > > > Why /root on the other machine is labeled user_home_t is a
> > > > bug.  Not sure why this is happening.  Do you have an entry in your
> > > > /etc/passwd with a UID > 500 with /root as a home dir?
> > > 
> > > Of course not.  The only entries in /etc/passwd with /root for
> > > a home directory look as follows:
> > > 
> > > root:x:0:0:root:/root:/bin/bash
> > > operator:x:11:0:operator:/root:/sbin/nologin
> > 
> > Could you show us the result of
> > 
> > 	ls -Z /root
> 
> Where I am getting into troubles this shows
> 
> -rw-------  root root system_u:object_r:admin_home_t:s0 anaconda-ks.cfg

This is correct. As Dan W. already explained, which is what the
default policy sets and what it expects. You are welcome to modify
the behaviour either via SELinux module, or maybe semanage fcontext
would be enough.

[...]

> That other machine, a server which behaves after an upgrade, shows
> 
> -rw-------  root root system_u:object_r:user_home_t    anaconda-ks.cfg

Could you run

	ls -dZ /root

? (The thing I'm trying to verify is whether that /root is really
a directory or a symlink pointing to somewhere else.)

-- 
Jan Pazdziora | adelton at #satellite*, #brno
Satellite Engineering, Red Hat