主页 / computer / 问题 / 1854055
Accepted
Alex Anonym
Asked: 2024-08-30 13:08:30 +0800 CST

selinux：文件未按照管理员自定义重置为 unconfined_u:object_r:public_content_t:s0

  • 772
mkdir /files
touch /files/files{0..10}
semanage fcontext -a -t public_content_t "/files(/.*)?"
restorecon -v -R /files
semanage fcontext -a -t public_content_rw_t "/files(/files.*)?"
restorecon -v -R /files

错误：

/files not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files10 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files8 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files5 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files4 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files9 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files0 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files7 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files1 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files3 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files2 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0
/files/files6 not reset as customized by admin to unconfined_u:object_r:public_content_t:s0

負責

ls -Z /files:

输出：

-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 

0 Aug 30 00:47 files0
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files1
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files10
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files2
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files3
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files4
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files5
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files6
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files7
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files8
-rw-r--r--. 1 root root unconfined_u:object_r:public_content_t:s0 0 Aug 30 00:47 files9
security

1 个回答

  1. Best Answer

    当恢复上下文时，您需要使用标志-F：

    -F     Force reset of context to match file_context for customizable files, and the default file context, changing the user, role, range portion as well as the type.

    然后您可以重试：

    restorecon -RFv /files

    它应该可以工作。

    • 1

相关问题