Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Bill Nottingham
Lennart Poettering (mzerq...@0pointer.de) said: > > Another option would be to just relabel /home (# restorecon -R -v /home) at > > upgrade time. But this would also be time consuming. And would not catch > > the > > cases where the homedir is not in /home. > > I am strongly for this option. A

Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Lennart Poettering
On Fri, 01.06.12 09:13, Daniel J Walsh (dwa...@redhat.com) wrote: > > (I wouldn't care too much about homedirs outside of /home. A not in the > > release notes for such cases should suffice) > > > > Lennart > > > > Well it is slow in the same sense as find /home would be slow, restorecon is >

Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/01/2012 08:10 AM, Bill Peck wrote: > On 06/01/2012 06:14 AM, Lennart Poettering wrote: >> On Thu, 31.05.12 15:44, Daniel J Walsh (dwa...@redhat.com) wrote: >> >> Heya, >> >>> We have added file trans by name rules to policy to fix a lot of >>>

Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/01/2012 06:14 AM, Lennart Poettering wrote: > On Thu, 31.05.12 15:44, Daniel J Walsh (dwa...@redhat.com) wrote: > > Heya, > >> We have added file trans by name rules to policy to fix a lot of >> files/directories being created with the correct

Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Bill Peck
On 06/01/2012 06:14 AM, Lennart Poettering wrote: On Thu, 31.05.12 15:44, Daniel J Walsh (dwa...@redhat.com) wrote: Heya, We have added file trans by name rules to policy to fix a lot of files/directories being created with the correct label. We have problems on Distribution updates (F16-F17)

Re: As we develop SELinux we are adding new labels to homedir content

2012-06-01 Thread Lennart Poettering
On Thu, 31.05.12 15:44, Daniel J Walsh (dwa...@redhat.com) wrote: Heya, > We have added file trans by name rules to policy to fix a lot of > files/directories being created with the correct label. > > We have problems on Distribution updates (F16-F17) though, where there is a > files/directories

Re: As we develop SELinux we are adding new labels to homedir content

2012-05-31 Thread Miloslav Trmač
On Thu, May 31, 2012 at 9:44 PM, Daniel J Walsh wrote: > A third option would be to run "restorecon -R -v $HOME" in background in an > profile script the first time you login on a new OS Version.  This would seem > to be the least time consuming, but could be subject to race conditions, you > hit

Re: As we develop SELinux we are adding new labels to homedir content

2012-05-31 Thread Miroslav Suchy
On 31.5.2012 21:44, Daniel J Walsh wrote: A third option would be to run "restorecon -R -v $HOME" in background in an profile script the first time you login on a new OS Version. This would seem to be the least time consuming, but could be subject to race conditions, you hit the mislabeled file

As we develop SELinux we are adding new labels to homedir content

2012-05-31 Thread Daniel J Walsh
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 We have added file trans by name rules to policy to fix a lot of files/directories being created with the correct label. We have problems on Distribution updates (F16-F17) though, where there is a files/directories in the homedir that are mislabeled.