[refpolicy] how to best deal with the move from bin to /usr/sbin

[refpolicy] how to best deal with the move from bin to /usr/sbin

[Dominick Grift]

Many distributions want to get rid of /bin and /sbin and use /usr/bin
and usr/sbin/ respectively instead.

how to best deal with that?

do we add a file_contexts.subs_dist entry or edit all /bin /sbin entries
with (usr/)?

How does Fedora deal with this?

[refpolicy] how to best deal with the move from bin to /usr/sbin

[Sven Vermeulen]

If we would use the regexp approach, we need to make sure that it doesn't
change any matching order. As you know, if two contexts with regexps exist,
then the one with the regexp closest to the start of the string loses...

On Sep 10, 2012 1:04 PM, "Dominick Grift" <dominick.grift@gmail.com> wrote:
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://oss.tresys.com/pipermail/refpolicy/attachments/20120910/fe848758/attachment.html 

[refpolicy] how to best deal with the move from bin to /usr/sbin

[Miroslav Grepl]

On 09/10/2012 01:04 PM, Dominick Grift wrote:
> Many distributions want to get rid of /bin and /sbin and use /usr/bin
> and usr/sbin/ respectively instead.
>
> how to best deal with that?
>
> do we add a file_contexts.subs_dist entry or edit all /bin /sbin entries
> with (usr/)?
>
> How does Fedora deal with this?
>
> _______________________________________________
> refpolicy mailing list
> refpolicy at oss.tresys.com
> http://oss.tresys.com/mailman/listinfo/refpolicy
Dan added a lot of fixes to *.fc files. Basically you can check them on 
fedorahosted repo.

# git log master

and search "sbin", "bin" strings

----

commit de8b29a88b8151af675a2c8f6777be3be7dcb216
Author: Dan Walsh <dwalsh@redhat.com>
Date:   Tue Dec 6 19:20:22 2011 -0500

     Fedora is moving all files in /lib, /lib64, /sbin, /bin into 
/usr/lib, /usr/lib64, /usr/sbin and /usr/bin

     This update will fix the labeling for all these files

commit a03e14710e91870e05f3a52294ea5523477dc3db
Author: Dan Walsh <dwalsh@redhat.com>
Date:   Tue Dec 6 12:13:42 2011 -0500

     More fixes for the move from /lib, /bin, /sbin, to /usr directory

[refpolicy] how to best deal with the move from bin to /usr/sbin

[Guido Trentalancia]

Hello.

 > Many distributions want to get rid of /bin and /sbin and use /usr/bin
 > and usr/sbin/ respectively instead.

 > how to best deal with that?

 > do we add a file_contexts.subs_dist entry or edit all /bin /sbin entries
 > with (usr/)?

In my opinion, the file_contexts.subs_dist is not to be edited by 
Reference Policy, but only by individual distributions (in their private 
patches that will always exist to some extent) or by end-users.

It is provided by Reference Policy as an aid towards easier 
customization of binary locations and should contain very few entries 
(for example, if the are critical).

In that view, the addition of /etc/rc.d/init.d /etc/init.d alias is 
already in excess.

If you are sure that a given alternative base location is used by a 
given distribution, then perhaps you could add commented entries in 
file_contexts.subs_dist specifying the distribution using such 
alternative location...

 > How does Fedora deal with this?

Best regards,

Guido