Thursday, July 30, 2015

Embrace the dark side:SELinux

It's annoying.
It works.

If you've got a home directory somewhere else than /home, you might have some funny business. It usually shows up as "/usr/bin/xauth: timeout in locking authority file .Xauthority". Some other security related things stop working too.

This is how all that goes away.

Edit /etc/selinux/semanage.conf
usepassword=True

yum install policycoreutils-python

Clone the context from the standard home directory layout into the new home directory, my users are under /test, i.e., /test/user
semanage fcontext -a -e /home /test
restorecon -R /test


Job done, everything works as intended.

No comments: