[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: SELinux settings in SPEC file



Gérard Milmeister wrote:
> Looks good for a start. Don't you think using restorecon instead of
> chcon would be safer? The probability of missing something is smaller.

I guess restorecon is better if you need to change a directory with
different types in it. It clearer that multiple chcon's.
Otherwise I think it can be left to the packager's preference.

> Do these scripts work when SELinux is not installed, resp. completely
> disabled?

No idea. I'll add a TODO section to the page, and point feodra-selinux-list
at it.


Aurélien
-- 
http://aurelien.bompard.org  ~~~~  Jabber : abompard jabber fr
"Never test for an error condition you don't know how to 
handle." -- Steinbach's Guideline for Systems Programming



[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]