On Mon, Apr 20, 2009 at 03:50:24PM -0400, Daniel J Walsh wrote: > On 04/20/2009 03:36 PM, Bandan Das wrote: >> ... > genhomedircon on RHEL5 is a python script so you can edit it and have it > exit on start or ignore /h > > But if we update policycoreutils, you changes would get overwritten. > > I believe this works but I never tried it. > > Add the following to /etc/selinux/semanage.conf and it will use the > alternate script instead of the standard > > > [genhomedircon] > path = /usr/local/sbin/genhomedircon_modified args = -t $@ > [end] > > > > > [genhomedircon] > path = /usr/bin/true args = -t $@ > [end] > > would cause it to always succeed and do nothing. ( I think.) Wouldn't it be better to not try to autogenerate the list of directories to be labeled with home_root_t ? Why is that impossible to generate that list once and save it somewhere in /etc/ and allow sysadmin to edit that list to suit his needs? Make the first autogeneration loud and verbose and document that config everywhere. You can't guess every possible system's configuration anyway. -- Alexey S -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@xxxxxxxxxxxxx with the words "unsubscribe selinux" without quotes as the message.
