[CentOS] SELinux context for ssh host keys?

James B. Byrne byrnejb at harte-lyne.ca
Tue Feb 10 14:34:13 UTC 2015


On Tue, February 10, 2015 09:25, James B. Byrne wrote:

By mistake.  Sorry for the otherwise empty quoted reply.  I have no
idea what I pressed that sent it off while I was reading.

And, since I am committed to writing anyway, recall that a host key
goes into /etc/ssh.  Personal keys go into ~/.ssh.

As to why I am not using the default name for the rsa host key. That
is because I am testing and I would rather not disturb things too much
given my ignorance of ssh matters.

I am startled to learn, if it is a fact, that existing SELinux policy
is tied to the default file names.  Given that the host key file names
are user configurable in in sshd_config one would think that a
slightly more flexible approach is called for.

-- 
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3




More information about the CentOS mailing list