Re: different selinux file-context root

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Mon, Aug 09, 2004 at 03:52:23PM -0400, Stephen Smalley wrote:
> On Mon, 2004-08-09 at 15:57, Luke Kenneth Casson Leighton wrote:
> > i'm thinking of doing installs of selinux systems and online
> > backups/restores from an initial ramdisk.
> > 
> > e.g. modifying rsync to cope with selinux file contexts.
> > 
> > e.g. there are several backup programs that create bootable CDs, that
> > then redo the entire system.
> > 
> > what would make sense is for rsync, star etc. to have a context-"chroot"
> > under which the selinux file contexts get recreated relative to that
> > directory as the root filesystem.
> > 
> > then i don't have to mess about ensuring that the entire filesystem
> > is correctly there and then doing something like this:
> > 
> > 	chroot /mnt-point make -C /etc/selinux/src relabel
> 
> setfiles has a -r rootpath option (contributed by the Gentoo folks) that
> causes it to strip the specified rootpath prior to matching against
> file_contexts.  

 great!

> Or, if using matchpathcon() directly, you can always
> have the caller strip the rootpath itself prior to invoking
> matchpathcon().

 yukk :)

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.