Daniel J Walsh (dwa...@redhat.com) said: 
> Are you talking about mounting shm at /var/run and /var/lock?  SELinux
> should be able to handle this.

I mean the case where you have:

%dir /var/run/mypackage

In the world where you mount a tmpfs there, mypackage would need to create
that dir on startup. However, it's possible that mypackage is a confined
daemon that only has privleges to write to /var/run/mypackage, not to
/var/run itself to create the directory. (The same thing can just happen
with daemons that run as non-root, without SELinux being involved.)

Of course, we can wait for Val's unionfs stuff to show up upstream, and fix
it that way. But that may be considered cheating.

Bill
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Reply via email to