genhomedircon flakyness

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Tue Apr 12 18:10:35 UTC 2005


Running fedora-devel tree as of last night, and I'm hitting an oddness.

Basic problem: I add a user to /etc/selinux/strict/users/local.users,
and at some later point I run 'make' in /etc/selinux/strict/src/policy.
After that, genhomedircon barfs because it sees lines like:

/home/valdis            -d      valdis:object_r:staff_home_dir_t

in contexts/files/file_contexts.homedirs.  However, since it just built the
policy using the 'users' file from src/policy/users, that 'user valdis'
line isn't there, so the context is invalid....

Does src/policy/Makefile need a ruleset to regenerate its copy of the 'users' file?

users: $(USERPATH)/system.users $(USERPATH)/local.users
	cat $(USERPATH)/system.users $(USERPATH)/local.users > users

(Actually, that won't work, as $(USERPATH)/system.users has a dependency
on $(USER_FILES), so a more sophisticated solution is needed...

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20050412/75095777/attachment.sig>


More information about the fedora-selinux-list mailing list