[CentOS] SELinux context for ssh host keys?

Tue Feb 10 14:25:41 UTC 2015
James B. Byrne <byrnejb at harte-lyne.ca>

On Tue, February 10, 2015 04:18, Andrew Holway wrote:
> On 10 February 2015 at 06:32, Mark Tinberg <mark.tinberg at wisc.edu>
> wrote:
>
>>
>> > On Feb 9, 2015, at 12:27 PM, Robert Nichols
>> <rnicholsNOSPAM at comcast.net>
>> wrote:
>> >
>> > On 02/09/2015 11:14 AM, James B. Byrne wrote:
>> >> So, I decided to run restorecon -v to
>> >>
>> ...
>> >> restorecon reset /etc/ssh/ssh_host_rsa_key_4096 context
>> >> unconfined_u:object_r:sshd_key_t:s0->unconfined_u:object_r:etc_t:s0
>>
>
> Why are you putting your SSH key in /etc/ ?
>
> With SELinux its normally better to go with the flow. find out which
> directories have the desired label and keep your objects in there.
>
> I'm guessing in this case ~/.ssh/
>
>




-- 
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3