Strict policy tweak for homedir_template

[Valdis.Kletnieks at vt.edu]

selinux-policy-strict-2.2.23-15

I couldn't figure out why stuff in ~/.ssh was getting set to
user_home_t rather than user_home_ssh_t.  I had to do the following
patch (to make more-specifics come later) and re-run genhomedircon
before restorecon and friends started DTRT...

--- homedir_template.dist	2006-03-15 16:05:28.000000000 -0500
+++ homedir_template	2006-03-15 17:18:02.000000000 -0500
@@ -2,6 +2,7 @@
 HOME_ROOT		-d	system_u:object_r:home_root_t:s0
 HOME_ROOT/\.journal		<<none>>
 HOME_ROOT/lost\+found		-d	system_u:object_r:lost_found_t:s0
+HOME_DIR/.+		system_u:object_r:ROLE_home_t:s0
 HOME_DIR/((www)|(web)|(public_html))(/.+)? system_u:object_r:httpd_ROLE_content_t:s0
 HOME_DIR/\.gnupg(/.+)?		system_u:object_r:ROLE_gpg_secret_t:s0
 HOME_DIR/\.ircmotd	--	system_u:object_r:ROLE_irc_home_t:s0
@@ -12,7 +13,6 @@
 HOME_DIR/\.ssh(/.*)?			system_u:object_r:ROLE_home_ssh_t:s0
 	HOME_DIR/\.uml(/.*)?		system_u:object_r:ROLE_uml_rw_t:s0
 HOME_DIR		-d	system_u:object_r:ROLE_home_dir_t:s0
-HOME_DIR/.+		system_u:object_r:ROLE_home_t:s0
 HOME_DIR/\.ICEauthority.* --	system_u:object_r:ROLE_iceauth_home_t:s0
 HOME_DIR/\.xauth.*	--	system_u:object_r:ROLE_xauth_home_t:s0
 HOME_DIR/\.Xauthority.*	--	system_u:object_r:ROLE_xauth_home_t:s0


-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20060315/2ce434c5/attachment.sig>