Re: selinux - help - directory policy syntax

2019-07-08 Thread Robin Laing
On 08/07/2019 21:05, Ed Greshko wrote: On 7/9/19 10:00 AM, Robin Laing wrote: Thanks.  In the hours of looking, not once did I see a reference to regex.  Never even thought of that.  Now I have a direction to go. Tim gave such a detailed explanation that I didn't think it was needed to mentio

Re: selinux - help - directory policy syntax

2019-07-08 Thread Ed Greshko
On 7/9/19 10:00 AM, Robin Laing wrote: > Thanks.  In the hours of looking, not once did I see a reference to > regex.  Never even thought of that.  Now I have a direction to go. Tim gave such a detailed explanation that I didn't think it was needed to mention that I found this after just a googl

Re: selinux - help - directory policy syntax

2019-07-08 Thread Robin Laing
On 07/07/2019 02:53, Tim via users wrote: On Sun, 2019-07-07 at 00:35 -0600, Robin Laing wrote: I want to modify a policy to allow a more localized directory for creating thumbnails for videos and such. Presently the policy "thumb_exec_t" is set for "thumb_home_t" I cannot find out in anything

Re: selinux - help - directory policy syntax

2019-07-08 Thread Robin Laing
On 07/07/2019 07:44, Robert Nichols wrote: On 7/7/19 1:35 AM, Robin Laing wrote: I cannot find out in anything I have searched what the syntax description for the two directories under this policy. /home/[^]+/\.cache/thumbnail(/.*)? /home/[^]+/\.thumbnail(/.*)? So, does the  [^] mean the "us

Re: selinux - help - directory policy syntax

2019-07-07 Thread Robert Nichols
On 7/7/19 1:35 AM, Robin Laing wrote: I cannot find out in anything I have searched what the syntax description for the two directories under this policy. /home/[^]+/\.cache/thumbnail(/.*)? /home/[^]+/\.thumbnail(/.*)? So, does the  [^] mean the "user" home directory? Does the + mean this di

Re: selinux - help - directory policy syntax

2019-07-07 Thread Tim via users
On Sun, 2019-07-07 at 00:35 -0600, Robin Laing wrote: > I cannot find out in anything I have searched what the syntax > description for the two directories under this policy. > > /home/[^]+/\.cache/thumbnail(/.*)? > > /home/[^]+/\.thumbnail(/.*)? > > So, does the [^] mean the "user" home direc

Re: selinux - help - directory policy syntax

2019-07-07 Thread Tim via users
On Sun, 2019-07-07 at 00:35 -0600, Robin Laing wrote: > I want to modify a policy to allow a more localized directory for > creating thumbnails for videos and such. Presently the policy > "thumb_exec_t" is set for "thumb_home_t" > > I cannot find out in anything I have searched what the syntax

selinux - help - directory policy syntax

2019-07-06 Thread Robin Laing
Hello, I have searched documentation but I cannot find the answer to my question. I want to modify a policy to allow a more localized directory for creating thumbnails for videos and such. Presently the policy "thumb_exec_t" is set for "thumb_home_t" I cannot find out in anything I have sea

Re: SELinux help

2010-09-08 Thread Chris Smart
On Thu, Sep 9, 2010 at 9:07 AM, Chris Smart wrote: > If I switch pam back to using mkhomedir instead of oddjob_mkhomedir, > then GDM works correctly. So I guess for some reason GDM doesn't play > nicely with oddjob. > Well on further investigation it appears that oddjob _does_ work correctly with

Re: SELinux help

2010-09-08 Thread Chris Smart
On Thu, Sep 9, 2010 at 9:02 AM, Chris Smart wrote: > > However, when I log in with GDM, it does _not_ create the home > directory automatically. Any ideas? > If I switch pam back to using mkhomedir instead of oddjob_mkhomedir, then GDM works correctly. So I guess for some reason GDM doesn't play

Re: SELinux help

2010-09-08 Thread Chris Smart
On Fri, Sep 3, 2010 at 11:15 PM, Daniel J Walsh wrote: > I am not sure what system-config-authorization is doing, is it setting > up pam_oddjob_mkhomedir or pam_mkhomedir.  It would be better if it used > pam_oddjob_mkhomedir. Thank you for your suggestions - they have fixed the SELinux issues. W

Re: SELinux help

2010-09-07 Thread Chris Smart
On Wed, Sep 8, 2010 at 1:04 AM, Daniel J Walsh wrote: > I think there is a open bug report about changing this to use > pam_oddjob_mkhomedir. This one? https://bugzilla.redhat.com/show_bug.cgi?id=617449 I can confirm that installing oddjob-mkhomedir before running authconfig configures PAM corre

Re: SELinux help

2010-09-07 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/05/2010 07:22 PM, Chris Smart wrote: > On Fri, Sep 3, 2010 at 11:15 PM, Daniel J Walsh wrote: >> I am not sure what system-config-authorization is doing, is it setting >> up pam_oddjob_mkhomedir or pam_mkhomedir. It would be better if it used >

Re: SELinux help

2010-09-05 Thread Chris Smart
On Fri, Sep 3, 2010 at 11:15 PM, Daniel J Walsh wrote: > I am not sure what system-config-authorization is doing, is it setting > up pam_oddjob_mkhomedir or pam_mkhomedir.  It would be better if it used > pam_oddjob_mkhomedir. It appears to be setting up pam_mkhomedir.. -c -- users mailing list

Re: SELinux help

2010-09-03 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/02/2010 08:16 PM, Chris Smart wrote: > HI all, > > I know there's been a lot of discussion about SELinux lately, but I > like it and I use it (although I'm a recent Fedora convert). However, > just today I have hit a snag and I don't know to get

Re: SELinux help

2010-09-02 Thread Daniel B. Thurman
On 09/02/2010 05:16 PM, Chris Smart wrote: > HI all, > > I know there's been a lot of discussion about SELinux lately, but I > like it and I use it (although I'm a recent Fedora convert). However, > just today I have hit a snag and I don't know to get around it - I'm > after some advice on how to

SELinux help

2010-09-02 Thread Chris Smart
HI all, I know there's been a lot of discussion about SELinux lately, but I like it and I use it (although I'm a recent Fedora convert). However, just today I have hit a snag and I don't know to get around it - I'm after some advice on how to work around it (without turning SELinux off!). I have