From mboxrd@z Thu Jan 1 00:00:00 1970 Subject: Re: [PATCH 029/155] policycoreutils: fixfiles clean up /var/run and From: Stephen Smalley To: Daniel J Walsh Cc: eparis@redhat.com, selinux@tycho.nsa.gov In-Reply-To: <4E39B5E6.8000100@redhat.com> References: <4E39B5E6.8000100@redhat.com> Content-Type: text/plain; charset="UTF-8" Date: Thu, 04 Aug 2011 10:56:07 -0400 Message-ID: <1312469767.20973.53.camel@moss-pluto> Mime-Version: 1.0 Sender: owner-selinux@tycho.nsa.gov List-Id: selinux@tycho.nsa.gov On Wed, 2011-08-03 at 16:56 -0400, Daniel J Walsh wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > This patch looks good to me. acked. >>From dff45c3977973dfbdbc7261b6fef05215d3515d8 Mon Sep 17 00:00:00 2001 From: Eric Paris Date: Sun, 10 Jul 2011 13:35:32 +0200 Subject: [PATCH 029/155] policycoreutils: fixfiles clean up /var/run and /var/lib/debug clean up /var/run and /var/lib/debug just like we do for /tmp and /var/tmp since they can easily get unlabeled files. Signed-off-by: Eric Paris --- policycoreutils/scripts/fixfiles | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) diff --git a/policycoreutils/scripts/fixfiles b/policycoreutils/scripts/fixfiles index 1da3fb2..c5c92bf 100755 --- a/policycoreutils/scripts/fixfiles +++ b/policycoreutils/scripts/fixfiles @@ -142,6 +142,8 @@ rm -rf /tmp/gconfd-* /tmp/pulse-* /tmp/orbit-* find /tmp \( -context "*:file_t*" -o -context "*:unlabeled_t*" \) \( -type s -o -type p \) -delete find /tmp \( -context "*:file_t*" -o -context "*:unlabeled_t*" \) -exec chcon -t tmp_t {} \; find /var/tmp \( -context "*:file_t*" -o -context "*:unlabeled_t*" \) -exec chcon -t tmp_t {} \; +find /var/run \( -context "*:file_t*" -o -context "*:unlabeled_t*" \) -exec chcon -t var_run_t {} \; +[ -e /var/lib/debug ] && find /var/lib/debug \( -context "*:file_t*" -o -context "*:unlabeled_t*" \) -exec chcon -t lib_t {} \; exit $? } Does it bother anyone else that you are hardcoding policy types into your scripts here? What happens when someone wants to use a different policy that doesn't define those types? -- Stephen Smalley National Security Agency -- This message was distributed to subscribers of the selinux mailing list. If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with the words "unsubscribe selinux" without quotes as the message.