Re: gnuTAR support for SELinux context (beta)

[James Antill <jantill@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 1359 bytes --]

On Tue, 2006-08-01 at 14:28 -0400, Stephen Smalley wrote:
> On Tue, 2006-08-01 at 13:27 -0400, James Antill wrote:
> >In a similar vein
> > you can ignore any selinux context information by using --no-selinux
> > when you extract, or --no-xattrs to ignore all xattr information.

> What about just saving the selinux contexts by default if they are
> present on the files being archived (and likewise extracting them by
> default if present in the archive)?  Otherwise, users have to take
> explicit action to save and restore the file contexts and will continue
> to "lose" them by default.

 Note that --xattrs is on by default for extracting, you have to use the
--no-* varients to not extract that info. from the archive. So if you
pass --selinux or --xattrs on the create command line, it just works.
 There are backwards compatibility concerns with enabling even --selinux
by default for creating archives (older versions of GNUtar will spew
warnings, and give error exit codes).

 It's also not obvious it should happen, consider files created in /tmp
and tar'd ... extracting them with tmp_t is probably not what you want.
Dito things like untar'ing an archive of html in /var/www/html (on the
other hand, untar'ing php will only ever work if it has the right
context in the archive).

-- 
James Antill <jantill@redhat.com>

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]