Re: udev and .dev...

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Thu, Jul 29, 2004 at 01:03:02PM -0400, Stephen Smalley wrote:
> On Thu, 2004-07-29 at 11:09, Erich Schubert wrote:
> > This sounds like relabling hell :-) "make relabel" might even skip /.dev
> > because it doesn't know the file system.
> > You can't use "make relabel" to persistently fix labels on /dev.
> > I don't know enough about automatic labelling by selinux. Maybe you'll
> > need a udev which reads the file_contexts file. :-(
> > (or a similar specification file)
> 
> I think in Fedora, udev is presently set up to invoke restorecon, which
> uses the matchpathcon() function to obtain the proper context from the
> file_contexts configuration and then relabels the device node to that
> context.  There was a patch to udev to directly call matchpathcon() and
> use setfscreatecon() to directly create the device node in the proper
> context, but that seems to have been dropped.
 
 the little program - udev_selinux - uses setfilecon not setfscreatecon.

 it's a separate program, similar to restorecon in fact it is
 likely to be the same.

 it's run post-thingy.  post-create.

 also, symlinks aren't covered / managed / created.

 looks like a proper job's needed.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.