add common_ssh_guest_no_exec
add common_ssh_guest_no_exec

this is kind of fragile.

It is probably a bad idea to allow sduser to execute home_cmd files as the caller in the sduser.role_template

for now just block any attempts by the the user to create ~/bin and ~/.local/bin

this will then not put us in a position where running fixfiles by mistake resets ~/bin and ~/.local/bin so that stuff in there because executable by sduser

DefenSec/selinux-rpm-spec