[CentOS] SELinux context for ssh host keys?

Andrew Holway andrew.holway at gmail.com
Tue Feb 10 09:18:55 UTC 2015


On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg at wisc.edu> wrote:

>
> > On Feb 9, 2015, at 12:27 PM, Robert Nichols <rnicholsNOSPAM at comcast.net>
> wrote:
> >
> > On 02/09/2015 11:14 AM, James B. Byrne wrote:
> >> So, I decided to run restorecon -v to
> >>
> ...
> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context
> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0
>

Why are you putting your SSH key in /etc/ ?

With SELinux its normally better to go with the flow. find out which
directories have the desired label and keep your objects in there.

I'm guessing in this case ~/.ssh/



More information about the CentOS mailing list