Daniel J Walsh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I have added supported for GLOB expressions in restorecond. In order to > get nsplugin to work well, you need all of the contents of the homedir > labeled correctly. Unfortunately gnome creates directories at a fairly > random pace. FCFS. So it is very difficult to get transitions to > happen properly. As a tradeoff, we can use restorecond to watch the > homedir and relabel the directory when it is created. I know this is a > potential race condition. where some of the files created in the > directory will still have the wrong context, but I don't know of a > better solution. > > Telling everyone they need to restorcon -R -v ~ is not a great solution. > If you are worried about information flow you should never rely on > restorecond. > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (GNU/Linux) > Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org > > iEYEARECAAYFAkjFdxcACgkQrlYvE4MpobPtjACg3uyqaHD78FRxdaG5mfitnoB/ > lh0AnjvfDC2vmCWisxzWq2qFsZMMu3XK > =JiG7 > -----END PGP SIGNATURE----- > Merged in policycoreutils 2.0.56 -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
