On 27/08/10 07:12, Daniel B. Thurman wrote: > > I have several versions of root distro partitions of which I do > mount via fstab, but of course only one / and /boot partition > is to be defined for the version to be booted. > > What I would like to know is, if I do an /.autorelabel, > for one boot/root partition, does this mean that every > mounted filesystem that appears in /etc/fstab also gets > relabeled? If so, this is not what I want especially if > other root distro partitions are being mounted for example, > say: /md/{distro1, distro2, ...} > > So, How do I get around this? I could comment out > all entries in /etc/fstab except / and /boot (plus the > required entries), touch /.autorelabel, reboot, and once > relabeling is completed, then add back in the commented > out fstab entries, then issue a mount -a. Could I add an option > entry say: NO_RELABEL to certain fstab entries? > > Since I was introduced to the /media since F9, I never could > figure out how to add mounted "media" filesystems, which > is why I added them instead to fstab. > > How do I solve this issue? I create a local policy module for this sort of thing, with a file contexts entry like this: # Don't touch stuff here /srv/homes(/.*)? <<none>> So you could have: :::::::::::::: otherdistros.fc :::::::::::::: /md/distro1(/.*)? <<none>> /md/distro2(/.*)? <<none>> :::::::::::::: otherdistros.te :::::::::::::: policy_module(otherdistros, 0.0.1) Building and installing that module should do the trick. Paul. -- selinux mailing list selinux@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/selinux