Re: Is there difference betweek sefiles and restorecon in terms of labels

["Christopher J. PeBenito" <cpebenito@tresys.com>]

On 04/27/11 18:59, Sam Gandhi wrote:
> Looking at man pages of sefiles and restorecon , both mention that
> they initialize security context database ( extended attributes) on
> one or more filesystems.
> 
> There are certainly differences between command line arguments, but
> can these programs be used interchangeably as far as extended
> attributes they assign to files?

They both use the system's file context specification from the policy
and should set the same file context on any given path (if not, its a
bug).  The only difference between the two is their command line
arguments.  Setfiles, and correspondingly its command line arguments, is
primarily for initializing a filesystem's labels.  Restorecon is
oriented towards resetting the label on a file or a directory tree.

-- 
Chris PeBenito
Tresys Technology, LLC
www.tresys.com | oss.tresys.com

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.