[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: If you are maintinaing of developing a Fedora Package.



On Mon, Oct 15, 2007 at 11:31:17PM +0200, Karel Zak wrote:
>  Couldn't be better to maintain default selinux labels like others
>  file attributes?
> 
>      %attr(4755,root,root) %selinux(foo_t)  /bin/foo
>

I think restorecon is fare more better than this approach. With this you have two databases of file contexts - first is in specfile and second in selinux-policy*. When you use restorecon you have one centralised database. We will discuss if rpm will automaticaly run restorecon on all installed files.

Adam 


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]