On 10/31/2016 05:27 AM, Sven Vermeulen wrote: > On Oct 24, 2016 3:19 PM, "Stephen Smalley" <sds@xxxxxxxxxxxxx > <mailto:sds@xxxxxxxxxxxxx>> wrote: >> We'd also need to move chcat, since it imports seobject. However, on >> that topic, is there any reason to retain chcat? It was created for the >> original discretionary MCS model and I'm not sure it is used anymore by >> anyone. > > I am aware of at least one company using chcat. However, I don't know to > what extend they rely on it - they use it in their user provisioning > scripts. > > I don't mind getting rid of it, assuming all its functionality is > covered elsewhere. Especially using the tool(s) in unattended scripts. I think that for that situation chcat is just invoking semanage login with appropriate arguments, so you could just directly invoke semanage. _______________________________________________ Selinux mailing list Selinux@xxxxxxxxxxxxx To unsubscribe, send email to Selinux-leave@xxxxxxxxxxxxx. To get help, send an email containing "help" to Selinux-request@xxxxxxxxxxxxx.