From: cpebenito@tresys.com (Christopher J. PeBenito)
Date: Thu, 25 Feb 2010 13:10:37 -0500
Subject: [refpolicy] home directory user context question
In-Reply-To: <4B86BA9D.80404@gmail.com>
References: <dd18b0c31002241551k6a236e90j69f20eeef9101f9a@mail.gmail.com>
	<5A5E55DF96F73844AF7DFB0F48721F0F52E446D3E8@EUSAACMS0703.eamcs.ericsson.se>
	<4B86BA9D.80404@gmail.com>
Message-ID: <1267121437.4999.3.camel@gorn.columbia.tresys.com>
To: refpolicy@oss.tresys.com
List-Id: refpolicy.oss.tresys.com

On Thu, 2010-02-25 at 09:59 -0800, Justin P. mattock wrote:
> On 02/25/2010 08:14 AM, Alan Rouse wrote:
> > Your home directory is labeled "user:" or "user_u" ?
> >
> > Mine is labeled "user_u:"
> 
> yeah my mistake it's user_u
> (user_u:object_r:user_home_dir_t)
> dos this look correct?
> 
> or should it be:
> name:object_r:user_home_dir_t

If you have UBAC enabled, then the seuser of the processes needs to
match the seuser on the contents of your home directory.  So your home
dir should be name:object_r:user_home_dir_t.

-- 
Chris PeBenito
Tresys Technology, LLC
(410) 290-1411 x150