On Mon, 27 Dec 2004 11:32:41 EST, Colin Walters said: > Dan recently worked on a patch for coreutils to make the 'install' > command do this internally. I don't think we can ask every ISV to > insert restorecon commands at arbitrary points in their code. Saying > however that they must use the 'install' command (or RPM) to install > software is a much more defensible position, IMO. Any opinions on how they should integrate their current 'mknod' commands, which currently need a restorecon? Should mknod handle it, or is that part still NVidia's problem? (I suppose it would be OK to push *that* one back at the sofware - many packages install dozens or even hundreds of regular files, but rarely use mknod (even the NVidia one has some 35 files and only 7 mknod's)
Attachment:
pgpL4WZOk186F.pgp
Description: PGP signature
