On Sun, Oct 25, 2009 at 20:37:40 +0000, Arthur Dent <misc.lists@xxxxxxxxxxxxxxxx> wrote: > > Thank you - but I'm not sure I fully understand what you're saying. Do > you mean that if I had first switched to permissive mode, that those > errors would not have occurred? Yes. > Surely if a particular context is "not valid" there is nothing a relabel > can do - permissive mode or otherwise? Or have I misunderstood? It's not that the context is valid, but that you may not have permission to make the changes. > My question was really: > a) How have I ended up with all of those invalid contexts? and It might be just changes in labels from previous versions of the policy. Normally the changes get made during updates. > b) Given that, as far as I can tell, most things seem to work - should I > be concerned about these error messages? Having things mislabelled can cause problems. You can either do a full relabel or use restorecon to fix them. Since you seem to know which ones did not get relabelled you can do a targetted relabelling with restorecon instead of checking evry file on your system. -- fedora-selinux-list mailing list fedora-selinux-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-selinux-list
