On 01/26/2015 06:18 PM, Jakub Hrozek wrote:
Hi,
to reproduce, set a SELinux label for a user. Log in as the user and
observer the permissions of /etc/selinux/targeted/modules/active
changing to 0600. As a result, even local semanage tools didn't work..
The patch works fine. I will wait for the CI to finish before I ack it.
Just for the record, in my case the semanage tools worked even without
this patch, but I could see the unwanted changes in the directory
permissions - with this patch everything was OK.
Michal