Robert P. J. Day (rpjday@xxxxxxxxxxxxxx) said: > ===== > if [ -x /sbin/restorecon ] && LC_ALL=C fgrep -q " /dev " /proc/mounts ; then > /sbin/restorecon -R /dev 2>/dev/null > fi > ===== > > which will *apparently* be run regardless of whether or not selinux is > enabled or not. if selinux is disabled, is there any point in even > checking whether or not to run restorecon? (from what i read, the > "rectorecon" program is clearly related to selinux.) restorecon will check whether selinux is enabled and immediately exit, so it's not a huge saving to bail in the !SELinux case. But fixed in CVS anyway. :) Bill
