Re: how to cope with file renames?

[Daniel J Walsh <dwalsh@redhat.com>]

On 03/11/2010 03:19 AM, Michal Svoboda wrote:
> Hello,
>
> I'm struggling with the problem seemingly as old as filesystems - if you
> rename() a file, it retains all its permissions, incl. the context,
> because its inode stays the same.
>
> My particular problem is moving stuff from /tmp using PHP's
> move_uploaded_file function. I'm aware of the copy/delete workaround,
> but that just isn't the same (performance, atomicity, etc.) Also there
> is the way of post-relabeling the moved file but that requires more
> permissions plus there are no selinux bindings in PHP that i'm aware of.
>
>    
I think this is your best option.  Or write your own version.  Maybe 
open a bugzilla on coreutils asking for
an option to either allow you to state the file context of the 
destination or just do not preserve file context.

> In short, I was wondering if there was a way for a rename()d file to be
> subjected to a type transition as if a new file was created? (I tried a
> type_trans rule but to no avail.) Or any other way to deal with renaming
> files between variously contexted dirs?
>
> Michal Svoboda
>
>    


--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.