Re: Restorecon script

[Luke Kenneth Casson Leighton <lkcl@lkcl.net>]

On Fri, Jun 10, 2005 at 02:19:44PM -0400, Karl MacMillan wrote:

> > I don't see how it's possible to solve this problem just by
> > restructuring directories. Can you give an example of how
> > the gconf-vs-orbit problem can be solved - see the file_type_auto_trans
> > thread for full description.
> > 
> 
> I thought this was answered - they need to be put in separate directories, e.g.
> /tmp/orbit/orbit-$USER and /tmp/gconfd/gconfd-$USER. That way /tmp/orbit and
> /tmp/gconfd can have different types and the only changes required for orbit and
> gconfd are to put their files in a different location. If /tmp is tmpfs there
> needs to be a script that creates these directories with the correct labels at
> boot.

 and a solution to the "i can't do that because there are so many
 applications implicitly utilising /tmp/orbit-$USER, /tmp/gconfd-$USER,
 /tmp/.ICE-unix, /tmp/.font-unix, /tmp/.X11-unix, is to create a
 runtime-configurable library that can be told "use
 /tmp/<DIR>/.xxx-$USER instead of /tmp/.xxx-$USER".

 once all programs use the library, change the location.

 l.


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.