Displaying 2 results from an estimated 2 matches for "selinux_type".
2014 May 27
3
Re: [PATCH 2/2] Use setfiles from the appliance for the SELinux relabel (RHBZ#1089100).
On Tuesday 27 May 2014 09:08:27 Richard W.M. Jones wrote:
> On Mon, May 26, 2014 at 11:21:59AM +0200, Pino Toscano wrote:
> > Rewrite the relabel API to read the policy configured in the guest,
> > invoking setfiles (added as part of the appliance, as part of
> > policycoreutils) to relabel the specified root. In case of failure
> > at
> > any point of the process,
2014 May 27
2
Re: [PATCH 2/2] Use setfiles from the appliance for the SELinux relabel (RHBZ#1089100).
...single
> file (defaults to "/").
>
> root =>
> Inspection root of guest. Optional, only makes sense when
> 'contexts' param is *omitted*.
>
> contexts =>
> The `file_contexts' file. Defaults to
> /etc/selinux/$selinux_type/contexts/files/file_contexts
>
> OSTree would probably want to pass:
>
> /ostree/deploy/$osname/deploy/$checksum/etc/selinux/targeted/contexts
> /files/file_contexts
>
> Inspection could be updated to parse /etc/selinux/config in order to
> get the default SELinu...