Re: Restorecon script

[Joshua Brindle <jbrindle@tresys.com>]

Ivan Gyurdiev wrote:

>Any comments on the following script?
>It's a profile script, to be shipped with selinux-policy-strict, 
>executed per login shell. It hardcodes the applications, 
>unfortunately, but does what we want for right now 
>(at least a temp. solution, unless someone has a better one?)
>Also, user needs to start a login shell to get it to run.
>  
>
What problem is this solving? In general relabeling isn't something that 
should be done without careful attention, especially when automated. 
User home directories shouldn't have incorrect labels is care is taken 
(ie, skel contains the directories you'd be relabeling anyway and they 
are labeled correctly when the user is added).

Joshua Brindle

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.