Bug 160897
Summary: | Better mechanism is needed for pre-creating folders | ||
---|---|---|---|
Product: | [Fedora] Fedora | Reporter: | Ivan Gyurdiev <ivg231> |
Component: | selinux-policy-strict | Assignee: | Daniel Walsh <dwalsh> |
Status: | CLOSED RAWHIDE | QA Contact: | |
Severity: | medium | Docs Contact: | |
Priority: | medium | ||
Version: | rawhide | ||
Target Milestone: | --- | ||
Target Release: | --- | ||
Hardware: | i386 | ||
OS: | Linux | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | Environment: | ||
Last Closed: | 2006-09-18 19:04:38 UTC | Type: | --- |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: |
Description
Ivan Gyurdiev
2005-06-18 07:12:09 UTC
This bug refers to the /etc/profile.d/selinux.sh script, which is a (necessary) hack, that should be eradicated in the long term, and replaced with a per package solution of some kind. A related item is the need to pre-create /tmp folders that are not "owned" by a particular user (like .*-unix). The selinux.sh script does not work for those, because it's a profile script. Those folders can be erased on a tmpfs /tmp, and need to be re-created before anything starts using them, mis-setting the context. This seems to imply that we need a boot time script for selinux as well. restorecond can do this. |