search for: 2855d70

...item B<--selinux> -Enable SELinux in the rescue appliance. You should read -L<guestfs(3)/SELINUX> before using this option. +This option is provided for backwards compatibility and does nothing. =item B<--smp> N diff --git a/src/guestfs.pod b/src/guestfs.pod index 2a199c0..2855d70 100644 --- a/src/guestfs.pod +++ b/src/guestfs.pod @@ -458,8 +458,8 @@ an X86 host). =item * -For SELinux guests, you may need to enable SELinux and load policy -first. See L</SELINUX> in this manpage. +For SELinux guests, you may need to relabel the guest after +creating new files. Se...

...item B<--selinux> -Enable SELinux in the rescue appliance. You should read -L<guestfs(3)/SELINUX> before using this option. +This option is provided for backwards compatibility and does nothing. =item B<--smp> N diff --git a/src/guestfs.pod b/src/guestfs.pod index 2a199c0..2855d70 100644 --- a/src/guestfs.pod +++ b/src/guestfs.pod @@ -458,8 +458,8 @@ an X86 host). =item * -For SELinux guests, you may need to enable SELinux and load policy -first. See L</SELINUX> in this manpage. +For SELinux guests, you may need to relabel the guest after +creating new files. Se...

We can use the setfiles(8) command to relabel the guest filesystem, even though we don't have a policy loaded nor SELinux enabled in the appliance kernel. This also deprecates or removes the old and broken SELinux support. This patch isn't quite complete - I would like to add some tests to the new API. I'm posting here to garner early feedback. Rich.

v1 -> v2: - Add simple test of the setfiles API. - Use SELinux_relabel module in virt-v2v (instead of touch /.autorelabel). - Small fixes. Rich.