On Mon, Jun 22, 2020 at 8:25 AM Stephen Smalley <stephen.smalley.work@xxxxxxxxx> wrote: > > On Thu, Jun 18, 2020 at 3:05 PM Jonathan Lebon <jlebon@xxxxxxxxxx> wrote: > > > > One thing that confused me when investigating > > https://github.com/SELinuxProject/selinux/issues/248 (i.e. > > https://github.com/coreos/fedora-coreos-tracker/issues/512) was that the > > manual page for `setfiles` seemed to imply that paths were fully > > resolved. This was consistent with the issues above where `setfiles` was > > failing because the target of the symbolic link didn't exist. > > > > But in fact, the wording around symbolic links in > > `setfiles`/`restorecon` refers actually to whether the parent > > directories are canonicalized via `realpath(3)` before labeling. > > > > Clarify the man pages to explain this. > > > > Signed-off-by: Jonathan Lebon <jlebon@xxxxxxxxxx> > > Acked-by: Stephen Smalley <stephen.smalley.work@xxxxxxxxx> Applied.
