In semanage_setfiles(), need to reset the restorecon handle to make sure restorecon is not operating on old selabel data. Signed-off-by: James Carter <jwcart2@xxxxxxxxx> --- libsemanage/src/semanage_store.c | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/libsemanage/src/semanage_store.c b/libsemanage/src/semanage_store.c index 2ca2e900..cf9aa809 100644 --- a/libsemanage/src/semanage_store.c +++ b/libsemanage/src/semanage_store.c @@ -3012,9 +3012,14 @@ log_callback_mute(__attribute__((unused)) int type, __attribute__((unused)) cons void semanage_setfiles(semanage_handle_t * sh, const char *path){ struct stat sb; int fd; + struct selabel_handle *sehandle; + union selinux_callback cb_orig = selinux_get_callback(SELINUX_CB_LOG); union selinux_callback cb = { .func_log = log_callback_mute }; + sehandle = selinux_restorecon_default_handle(); + selinux_restorecon_set_sehandle(sehandle); + /* Mute all logs */ selinux_set_callback(SELINUX_CB_LOG, cb); -- 2.48.1