Re: how to safely remove an acl: user_u:object_r:user_home_dir_t

[Berni Elbourn <berni421@gmail.com>]

On 10/05/12 19:59, Berni Elbourn wrote:
> On 10/05/12 18:43, Camaleón wrote:
> > On Thu, 10 May 2012 17:40:05 +0100, Berni Elbourn wrote:
> >
> > (...)
> >
> > > $ sudo setfacl -b /home/manager.gwcc/
> > > $ ls -lZd /home/manager.gwcc/
> > > drwxr-x---. 2 manager.gwcc e-manager user_u:object_r:user_home_dir_t 4096
> > ^
> >
> > (...)
> >
> > The final dot catched my attention :-)
> >
> > Check if this helps to understand what's going on:
> >
> > http://ubuntuforums.org/showthread.php?t=1315684
> >
> > Greetings,
>
> Something like "setfattr -x security.selinux /home/manager.gwcc" ???
>
> Trouble is selinux is off:
>
> $ sudo sestatus
> SELinux status: disabled
>
> Also the attr package is not installed...
>
> $ apt-cache policy attr
> attr:
> Installed: (none)
> Candidate: 1:2.4.44-2
> Version table:
> 1:2.4.44-2 0
> 500 http://ftp.uk.debian.org/debian/ squeeze/main amd64 Packages
>
> so no setfattr???

:-) But wow,  bite the bullet and install attr:

$ sudo getfattr -n security.selinux /home/manager.gwcc/
getfattr: Removing leading '/' from absolute path names
# file: home/manager.gwcc/
security.selinux="user_u:object_r:user_home_dir_t

$ sudo setfattr -x security.selinux  /home/manager.gwcc/
$ ls -lZd /home/manager.gwcc/
drwxr-x--- 2 manager.gwcc e-manager ? 4096 May 10 20:14 /home/manager.gwcc/
$ ls -ld /home/manager.gwcc/
drwxr-x--- 2 manager.gwcc e-manager 4096 May 10 20:14 /home/manager.gwcc/

Huge thanks !


--
"Confidence is what you have before you understand a problem" - Woody Allen