Re: Proposed patch for libselinux

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Mon, Oct 25, 2004 at 10:52:37AM -0400, Stephen Smalley wrote:
> Let's step back for a moment from the implementation details and talk
> about the concept/usage of this customized flag for SELinux attributes.
> 
> The file_contexts configuration and setfiles were only intended to
> initialize the system, as previously noted.  

 it would appear, therefore, that no provision has been made for
 filesystem recovery.

 i find frequently that ext3 filesystem damage results in fsck.ext3
 going "the extended attributes aren't valid: truncating".

 this leaves you with a (null) for an selinux access, as if you had
 run your system with a non-selinux kernel and written some files.

 under such circumstances, i find that the only [simple] means
 at present to recover such a damaged system is to run setfiles.

 l.

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.