semanage.conf - expand list of ignoredirs

It should prevent problems with wrong labels on directories in / after
commands like:

    # useradd -Z unconfined_u -d /var test

    # matchpathcon /var
    /var    unconfined_u:object_r:user_home_dir_t:s0
This commit is contained in:
Petr Lautrbach 2020-12-18 17:24:10 +01:00
parent 6cea6649ba
commit 0ae5e5f70c
1 changed files with 1 additions and 1 deletions

View File

@ -51,7 +51,7 @@ expand-check=0
usepasswd=False
bzip-small=true
bzip-blocksize=5
ignoredirs=/root
ignoredirs=/root;/bin;/boot;/dev;/etc;/lib;/lib64;/proc;/run;/sbin;/sys;/tmp;/usr;/var
optimize-policy=true
[sefcontext_compile]