紧急求助：不小心把 /etc/security/namespace.conf删除了

aka368

那位好心能把自己系统里的这个文件贴出来吗？

aka368

大家帮帮忙吧！
我可不想再重装系统了

SCys

touch 一个,默认为空文件

1. 
   
2. # /etc/security/namespace.conf
   
3. #
   
4. # See /usr/share/doc/pam-*/txts/README.pam_namespace for more information.
   
5. #
   
6. # Uncommenting the following three lines will polyinstantiate
   
7. # /tmp, /var/tmp and user's home directories. /tmp and /var/tmp will
   
8. # be polyinstantiated based on the MLS level part of the security context as well as user
   
9. # name, Polyinstantion will not be performed for user root and adm for directories
   
10. # /tmp and /var/tmp, whereas home directories will be polyinstantiated for all users.
    
11. # The user name and context is appended to the instance prefix.
    
12. #
    
13. # Note that instance directories do not have to reside inside the
    
14. # polyinstantiated directory. In the examples below, instances of /tmp
    
15. # will be created in /tmp-inst directory, where as instances of /var/tmp
    
16. # and users home directories will reside within the directories that
    
17. # are being polyinstantiated.
    
18. #
    
19. # Instance parent directories must exist for the polyinstantiation
    
20. # mechanism to work. By default, they should be created with the mode
    
21. # of 000. pam_namespace module will enforce this mode unless it
    
22. # is explicitly called with an argument to ignore the mode of the
    
23. # instance parent. System administrators should use this argument with
    
24. # caution, as it will reduce security and isolation achieved by
    
25. # polyinstantiation.
    
26. #
    
27. #/tmp     /tmp-inst/            level      root,adm
    
28. #/var/tmp /var/tmp/tmp-inst/    level      root,adm
    
29. #$HOME    $HOME/$USER.inst/     level
    

复制代码

aka368

谢谢
这个文件没有实际内容吗？

SCys

无实际内容.我都好少用到这个文件.( 太安全是很麻烦的 )
非服务器,很少人会限制用户可以进入的路径吧( 个人理解这个文件的用途 ).