restorecon and chroot

restorecon and chroot

[Russell Coker]

I think that we need an option for restorecon which is similar to the -r 
option of setfiles.

This would be useful for setting up chroot environments and possibly also for 
system recovery.

Any suggestion on what command-line option should be used?  It seems that -r 
is taken...

-- 
russell@coker.com.au
http://etbe.coker.com.au/          My Main Blog
http://doc.coker.com.au/           My Documents Blog

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: restorecon and chroot

[Daniel J Walsh]

On 07/15/2010 12:27 AM, Russell Coker wrote:
> I think that we need an option for restorecon which is similar to the -r 
> option of setfiles.
> 
> This would be useful for setting up chroot environments and possibly also for 
> system recovery.
> 
> Any suggestion on what command-line option should be used?  It seems that -r 
> is taken...
> 
Why not just use setfiles, since you will need to specify the
file_context path anyways?

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: restorecon and chroot

[Russell Coker]

On Thu, 15 Jul 2010, Daniel J Walsh <dwalsh@redhat.com> wrote:
> Why not just use setfiles, since you will need to specify the
> file_context path anyways?

setfiles requires that you specify the full path of the file_contexts file, 
this means that documentation that refers to it has to be distribution 
specific to a certain extent and it's annoying to use.

Now if setfiles could default to using the same file_contexts file that 
restorecon uses then that objection would go away.  Do you think we should 
change setfiles in such a manner?

-- 
russell@coker.com.au
http://etbe.coker.com.au/          My Main Blog
http://doc.coker.com.au/           My Documents Blog

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.

Re: restorecon and chroot

[Daniel J Walsh]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/17/2010 01:14 AM, Russell Coker wrote:
> On Thu, 15 Jul 2010, Daniel J Walsh <dwalsh@redhat.com> wrote:
>> Why not just use setfiles, since you will need to specify the
>> file_context path anyways?
> 
> setfiles requires that you specify the full path of the file_contexts file, 
> this means that documentation that refers to it has to be distribution 
> specific to a certain extent and it's annoying to use.
> 
> Now if setfiles could default to using the same file_contexts file that 
> restorecon uses then that objection would go away.  Do you think we should 
> change setfiles in such a manner?
> 
Ok, so you want restorecon to use an alternate root dir.  I
misunderstood.  The reason I originally wrote restorecon was I got sick
of specifying the path.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org/

iEYEARECAAYFAkxEWUgACgkQrlYvE4MpobN69gCgxJpwK5FMgbc58v5pcVOjL91E
0zcAnAroL61TitjY3WvBCHotKdE5Oq6a
=Qi/5
-----END PGP SIGNATURE-----

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.