Re: Add glob support for restorecond

[Joshua Brindle <method@manicmethod.com>]

Daniel J Walsh wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I have added supported for GLOB expressions in restorecond.  In order to
> get nsplugin to work well, you need all of the contents of the homedir
> labeled correctly.  Unfortunately gnome creates directories at a fairly
> random pace.  FCFS.  So it is very difficult to get transitions to
> happen properly.  As a tradeoff, we can use restorecond to watch the
> homedir and relabel the directory when it is created.  I know this is a
> potential race condition. where some of the files created in the
> directory will still have the wrong context, but I don't know of a
> better solution.
> 
> Telling everyone they need to restorcon -R -v ~ is not a great solution.
>  If you are worried about information flow you should never rely on
> restorecond.
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.9 (GNU/Linux)
> Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org
> 
> iEYEARECAAYFAkjFdxcACgkQrlYvE4MpobPtjACg3uyqaHD78FRxdaG5mfitnoB/
> lh0AnjvfDC2vmCWisxzWq2qFsZMMu3XK
> =JiG7
> -----END PGP SIGNATURE-----
> 

Merged in policycoreutils 2.0.56

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.