On Friday 10 October 2008 10:30, Murray McAllister <mmcallis@xxxxxxxxxx> wrote: > > tar xvf file.tgz | restorecon -f - > > > > Would reset the file context on disk after the extraction. > > Does this only apply to the tar file itself, not the files in it? On > rawhide the extracted files (that have extended attributes) inherit the > type of the directory they are being extracted in. The "v" option of tar causes it to list on stdout all the files it extracts. The -f- option of restorecon makes it take a list of files to relabel on stdin. So it relabels all files extracted from the tar file. The inheriting of file contexts from a directory (in the absence of policy rules specifying otherwise) has AFAIK always been the design of SE Linux. -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Blog http://www.coker.com.au/sponsorship.html Sponsoring Free Software development -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.