Re: As we develop SELinux we are adding new labels to homedir content

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Lennart Poettering (mzerqung@xxxxxxxxxxx) said: 
> > Another option would be to just relabel /home (# restorecon -R -v /home) at
> > upgrade time.  But this would also be time consuming. And would not catch the
> > cases where the homedir is not in /home. 
> 
> I am strongly for this option. Allowing the user to login while the
> relabel is still in progress (like it would with restorecond, right?)
> sounds like a really bad idea... I mean, incorrect labels when used just
> lead to more incorrect labels, no? And incorrect labels also result in
> access errors? Both sound like something to avoid...

I agree here as well. Given that even in our crazy Fedora world, we're only
doing upgrades at most every 6 months, an extra minute or 3 in the upgrade
process is just noise, it's not a dealbreaker.

Bill
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel



[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux