Tar storage of SELinux context, translated or not

[James Antill <jantill@redhat.com>]

[-- Attachment #1: Type: text/plain, Size: 910 bytes --]


 As some of you know, I have done patches to make GNUtar able to
save/restore ACLs, SELinux context and generic user xattrs. I've
recently had to fixup the ACL support for compatibility with star etc.,
and for a couple of reasons that got me thinking about the SELinux
support as well.

 I had originally decided that the SELinux security context should be
stored in translated form, Ie. getfilecon => tar => setfilecon, my
thinking was that if you want to store something over a long period this
is the better format ... but as I think more about it now I'm not 100%
convinced (for instance, AIUI ipsec etc. uses raw format to distribute
context between machines).
 With the current changes, this is a great time to change it (but I
really, really, don't want to have an option either way) ... if we want
to. So should I change it to non-translated?

-- 
James Antill <jantill@redhat.com>

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 189 bytes --]