Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Markku Kolkka
27.12.2012 3:03, James A. Peltier kirjoitti: I'm really feeling dense today. I can't find anywhere in the FTP man page anything related to SELinux labels. See man ftpd_selinux. -- Markku Kolkka markku.kol...@iki.fi ___ CentOS mailing

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/27/2012 06:09 AM, Markku Kolkka wrote: 27.12.2012 3:03, James A. Peltier kirjoitti: I'm really feeling dense today. I can't find anywhere in the FTP man page anything related to SELinux labels. See man ftpd_selinux. Depending on your

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread James A. Peltier
- Original Message - | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | On 12/27/2012 06:09 AM, Markku Kolkka wrote: | 27.12.2012 3:03, James A. Peltier kirjoitti: | | I'm really feeling dense today. I can't find anywhere in the FTP | man | page anything related to SELinux

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Harold Pritchett
On 12/26/2012 4:05 AM, James A. Peltier wrote: I'm trying to find a way to exclude file systems during the autorelabel process. I have a file system (/exports) that has tens of millions of files on it and I *know* I don't want it relabeled. How often do you need to do this? The obvious

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/27/2012 03:08 PM, James A. Peltier wrote: - Original Message - | -BEGIN PGP SIGNED MESSAGE- | Hash: SHA1 | | On 12/27/2012 06:09 AM, Markku Kolkka wrote: | 27.12.2012 3:03, James A. Peltier kirjoitti: | | I'm really feeling

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread Gordon Messmer
On 12/27/2012 12:40 PM, Harold Pritchett wrote: If you want to do this on a regular basis, just script the whole thing, including a script called from /etc/rc.d/rc.local which checks for a semaphore file created by the first script and does the uncomment and mount -a if the first script has

Re: [CentOS] Excluding file systems from autorelabel

2012-12-27 Thread James A. Peltier
- Original Message - | What does matchpathcon /exports/foobar say after you add that rule? they all directories report none including /exports itself. -- James A. Peltier Manager, IT Services - Research Computing Group Simon Fraser University - Burnaby Campus Phone : 778-782-6573 Fax

[CentOS] Excluding file systems from autorelabel

2012-12-26 Thread James A. Peltier
I'm trying to find a way to exclude file systems during the autorelabel process. I have a file system (/exports) that has tens of millions of files on it and I *know* I don't want it relabeled. I've tried semanage fcontext -a -t none /exports(/.*)? and it seems to insist on relabeling that

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread Russell Clay
It is possible to use semanage to label the files correctly and to persist after reboot see man pages for FTP Hope this helps Russell On 26 Dec 2012, at 09:05, James A. Peltier jpelt...@sfu.ca wrote: I'm trying to find a way to exclude file systems during the autorelabel process. I have a

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread Gordon Messmer
On 12/26/2012 01:05 AM, James A. Peltier wrote: I really need to make sure that I can exclude these massive directories if at all possible. The only way that appears to be available is to mark the filesystem noauto and mount it after the system has otherwise started.

Re: [CentOS] Excluding file systems from autorelabel

2012-12-26 Thread James A. Peltier
- Original Message - | It is possible to use semanage to label the files correctly and to | persist after reboot see man pages for FTP | Hope this helps | Russell I'm really feeling dense today. I can't find anywhere in the FTP man page anything related to SELinux labels. I've google'd