file labeling (was Re: applications and ports)

[Paul Krumviede <pwk@acm.org>]

--On Tuesday, 29 January, 2002 10:32 -0500 Stephen Smalley 
<sds@tislabs.com> wrote:

> You also need to assign the program type
> associated with the domain to the program in the file_contexts
> configuration and run 'make relabel' in the setfiles directory.
> Alternatively, you can directly set the label on a program via chcon, but
> it is a good idea to also update the file_contexts configuration in case
> you later do a 'make relabel'.

i would emphasize this last sentence, as i've confused myself by
failing to track manually labeled files in file_contexts only to have
policy changes fail to work unexpectedly after i'd relabel the
file system.

as an aside, the default install for file-utils in the latest release
doesn't seem to install the chcon man page, so i didn't find
the option to not dereference symbolic links for a bit.

-paul


--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.