I see the same thing on RHEL 6.5.
So should I assume this is a bug in SElinux/OS? Even so is there a way that I can work
around it? Would there be anything wrong with transitioning files I create in tmp from
tmp_t to user_tmp_t?
Date: Thu, 20 Feb 2014 14:21:55 -0500
From: dwalsh(a)redhat.com
To: swazup(a)hotmail.com; selinux(a)lists.fedoraproject.org
Subject: Re: Correct way to use booleans
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 02/20/2014 01:41 PM, Jayson Hurst wrote:
> I am running in permissive mode, my module is in permissive mode.
>
> I am actually running on RHEL 6.0.
>
> So in this scenario even though my daemon is authenticating the user it is
> not responsible for context that the krb5cc_xxx file gets created as?
>
The login daemons should be creating this file with the correct context.
user_tmp_t.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
Comment: Using GnuPG with Thunderbird -
http://www.enigmail.net/
iEYEARECAAYFAlMGVdMACgkQrlYvE4MpobPm+QCfX1s69csbRU8xfg8m796N+9Si
cZYAmgP8bmo4vV+ug10x8tlxKSr6rTqI
=2zvU
-----END PGP SIGNATURE-----