Mike Carney wrote:
Greetings,
I've got a couple of extra filesystems I use for various reasons which
currently have a default_t context. I mount them under a new directory
"/export", which I've set to mnt_t:
/dev/sda9 on /export/0 type ext3 (rw)
/dev/sdb9 on /export/1 type ext3 (rw)
/dev/sdb10 on /export/2 type ext3 (rw)
203# ls -dZ /export /export/*
drwxr-xr-x root root system_u:object_r:mnt_t /export/
drwxr-xr-x root root system_u:object_r:default_t /export/0/
drwxr-xr-x root root system_u:object_r:default_t /export/1/
drwxr-xr-x root root system_u:object_r:default_t /export/2/
204#
Any guidance as to what context should I set these file system mount
points to? mnt_t? usr_t? How do I specify using semanage that I don't
want the relabel to propogate to subdirectories? (e.g., <<none>>).
Depends on what you want to do with them. You can leave them as
default_t, if you do not want a confined domain
to touch them. If you need some confined domains to touch them you will
need to set context appropriately.
Thanks in advance,
Mike
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
--
fedora-selinux-list mailing list
fedora-selinux-list@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-selinux-list
