15:28 <@SwifT> I'm guessing that /var/lib/krb5kdc is like /var/kerberos/krb5kdc? 15:28 < godlike> hmmm this is weird, I don't have /var/kerberos 15:28 < godlike> I only have /var/lib/krb5kdc 15:29 <@SwifT> perhaps the following works: "semanage fcontext -a -e /var/kerberos/krb5kdc /var/lib/krb5kdc" ? 15:29 <@SwifT> yes, that's because the kerberos module is written with certain default paths in mind, and gentoo either uses different ones, or the author of the selinux policy used non-default ones 15:30 <@SwifT> with the above semanage command (the one with "-e") it sould tell selinux that everything in /var/lib/krb5kdc should be checked against /var/kerberos/krb5kdc in its own expression list 15:30 <@SwifT> so restorecon -R /var/lib/krb5kdc might fix the contexts there 15:31 < godlike> SwifT: drwxr-xr-x. 2 root root system_u:object_r:krb5kdc_conf_t 4096 Jul 1 11:04 krb5kdc 15:31 < godlike> you're a wizard Reproducible: Always
Added same substitution entry to the file_contexts.subs_dist file.
r3 is now in the tree, ~arch'ed
r4 is now stable in the tree