On Sat, 7 Mar 2009, Daniel J Walsh <dwalsh@xxxxxxxxxx> wrote: > With this type of functionality we can either get rid of genhomedircon > or allow it to just generate subs files that look like > > /export/home /home > /usr/local/home /home > > This has a side benefit of decreasing the size of regexs we need to > compile. > > I think there is little to no costs. Other the strcmp on all paths > handed in times the number of substitutions. > > What do you think? Sounds OK apart from the fact that it doesn't set the identity. What if you had an optional third field to store the identity for mapping individual users? Also what are the plans regarding roles nowadays? Is there still a plan to use roles other than object_r in filesystem labels? -- russell@xxxxxxxxxxxx http://etbe.coker.com.au/ My Main Blog http://doc.coker.com.au/ My Documents Blog -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
