re: id -Z subsumed by secon?

[Daniel J Walsh <dwalsh@redhat.com>]

>
>
> James Antill <james.antill@redhat.com> wrote:
>   
>> >  No, what Steven was saying is that the label for execcon will be reset
>> > on exec (after doing it's thing). To see this visually use "secon
>> > --self-exec" instead of id.
>> >
>> > % secon
>> > user: user_u
>>     
> ...
>
> Thanks for the example.
>
> By the way, doesn't secon make id's -Z option unnecessary?
> I'm planning not to include the 'id -Z' patches upstream,
> Instead, runcon (with neither CONTEXT nor COMMAND) will
> print the current security context -- to be analogous to how nice(1)
> works if you don't give it a command.
>
> Any objection?
>
>
>   
Yes I would like to maintain the idea of "-Z" being the way to view 
contexts.  This makes it easy for
a user to figure out how to see what context is being used.  ls -Z, ps 
-Z, netstat -Z ...


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.