Re: rpm and SElinux attributes

[Jeff Johnson <n3npq jbj gmail com>]

On Mar 21, 2007, at 8:58 AM, Valery Reznic wrote:

> Hello.
>
> In the rpm spec file one can use %attr directive to
> specify permission/owner/group.
> Is it something similar to specify files SELinux
> attributes, or the only way to do it is set them on
> the files in the BUILDDIR ?

File contexts are attached to files through SELinux regex's, so there  
is no %attr syntax.

Truly, there is no way to determine what attribute a file should have  
without carefully
examining the entire SELinux policy.

The idea of attaching a file context statically to a path in a *.rpm  
is naive.

73 de Jeff