Re: differences between setfiles and restorecon? repeat of old thread?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 8/29/05, Stephen Smalley <sds@xxxxxxxxxxxxx> wrote:
On Sat, 2005-08-27 at 12:58 -0700, Tom London wrote:
> 'setfiles -v /etc/selinux/targeted/contexts/files/file_contexts /' did
> the right thing.
>
> [Its almost as if restorecon is using the 'real' full pathname (with
> leading /mnt), and setfiles is using the 'chroot'ed' pathname (without
> the leading /mnt).]

BTW, I'm not sure what you mean by the above.  setfiles does accept a -r
option to specify an alternate root path, so you can apply it to a
chroot setup without running it chroot'd itself.  But without that
option, I wouldn't have expected it to touch /mnt at all, especially as
file_contexts marks it <<none>>.

First, thanks for the explanation.

My comment regarding 'real' vs. 'chroot-ed' pathnames was just my feeble poke at explaning what was going on. I had noticed the entry for /mnt in file_contexts, and concluded that 1+1=3. ;)

Regarding setfiles, thanks for the info regarding '-r' option. Its not in the man page nor in 'setfiles --help', so I did the 'chroot' balancing act.  'setfiles -r' produces 'usage:  setfiles -r rootpath' though.

tom
--
Tom London
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
http://www.redhat.com/mailman/listinfo/fedora-selinux-list

[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Big List of Linux Books]     [Yosemite News]     [Yosemite Campsites]     [KDE Users]     [Gnome Users]

  Powered by Linux