On 07/30/2015 10:22 AM, Petr Lautrbach wrote:
> -r, --root
> Set an alternative root for the migration (default: /)
>
> Signed-off-by: Petr Lautrbach <plautrba@xxxxxxxxxx>
Thanks, applied.
> ---
>
> In Fedora, we used this option in early phase of adopting 2.4 userspace to
> migrate SELinux modules in buildroots during build time. We don't use it anymore,
> but it might be useful for some other deployments.
>
> libsemanage/utils/semanage_migrate_store | 10 ++++++++--
> 1 file changed, 8 insertions(+), 2 deletions(-)
>
> diff --git a/libsemanage/utils/semanage_migrate_store b/libsemanage/utils/semanage_migrate_store
> index 6443002..539f469 100755
> --- a/libsemanage/utils/semanage_migrate_store
> +++ b/libsemanage/utils/semanage_migrate_store
> @@ -180,7 +180,7 @@ def rebuild_policy():
>
>
> def oldroot_path():
> - return "/etc/selinux"
> + return "%s/etc/selinux" % ROOT
>
> def oldstore_path(store):
> return "%s/%s/modules/active" % (oldroot_path(), store)
> @@ -192,7 +192,7 @@ def disabledmodules_path(store):
> return "%s/disabled" % newmodules_path(store)
>
> def newroot_path():
> - return PATH
> + return "%s%s" % (ROOT, PATH)
>
> def newstore_path(store):
> return "%s/%s/active" % (newroot_path(), store)
> @@ -219,6 +219,8 @@ if __name__ == "__main__":
> help="Disable rebuilding policy after migration (default: no)")
> parser.add_option("-P", "--path", dest="path",
> help="Set path for the policy store (default: /var/lib/selinux)")
> + parser.add_option("-r", "--root", dest="root",
> + help="Set an alternative root for the migration (default: /)")
>
> (options, args) = parser.parse_args()
>
> @@ -231,6 +233,10 @@ if __name__ == "__main__":
> if PATH is None:
> PATH = "/var/lib/selinux"
>
> + ROOT = options.root
> + if ROOT is None:
> + ROOT = ""
> +
> # List of paths that go in the active 'root'
> TOPPATHS = [
> "commit_num",
>
_______________________________________________
Selinux mailing list
Selinux@xxxxxxxxxxxxx
To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx.
To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.
