Re: Proposed change to install

[Karsten Wade <kwade@redhat.com>]

On Mon, 2004-12-27 at 09:33 -0500, Stephen Smalley wrote:
> On Mon, 2004-12-27 at 08:36, Daniel J Walsh wrote:
> > But with install, I believe 
> > matchpathcon is required.  So I am have modified the patch in coreutils 
> > to call matchpathcon and setfilecon.  This function currently will fail 
> > silently, leaving the current behavior.  Do you think this should report 
> > errors?
> 
> Likely not, if it is the default behavior, as the caller may not have
> permission to relabel files at all or to the particular context. 
> Definitely not for errno == EOPNOTSUPP, i.e. filesystems that do not
> support the security xattr.

OTOH, not having some error to work with makes it more difficult to
troubleshoot, in the case where labeling is desired but the user doesn't
have permission to label.  Something that conveys this:

"Error - labeling the file(s) foo, bar, baz failed.  Either SELinux is
not installed, is not an option, or you do not have permissions to
label.  If you think this is an error, contact your system
administrator."

- Karsten
-- 
Karsten Wade, RHCE, Sr. Tech Writer
a lemon is just a melon in disguise
http://people.redhat.com/kwade/
gpg fingerprint: 2680 DBFD D968 3141 0115  5F1B D992 0E06 AD0E 0C41


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.