[CentOS] SELinux context for ssh host keys?
James B. Byrne
byrnejb at harte-lyne.ca
Tue Feb 10 14:25:41 UTC 2015
On Tue, February 10, 2015 04:18, Andrew Holway wrote:
> On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg at wisc.edu>
> wrote:
>
>>
>> > On Feb 9, 2015, at 12:27 PM, Robert Nichols
>> <rnicholsNOSPAM at comcast.net>
>> wrote:
>> >
>> > On 02/09/2015 11:14 AM, James B. Byrne wrote:
>> >> So, I decided to run restorecon -v to
>> >>
>> ...
>> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context
>> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0
>>
>
> Why are you putting your SSH key in /etc/ ?
>
> With SELinux its normally better to go with the flow. find out which
> directories have the desired label and keep your objects in there.
>
> I'm guessing in this case ~/.ssh/
>
>
--
*** E-Mail is NOT a SECURE channel ***
James B. Byrne mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited http://www.harte-lyne.ca
9 Brockley Drive vox: +1 905 561 1241
Hamilton, Ontario fax: +1 905 561 0757
Canada L8E 3C3
More information about the CentOS
mailing list