upgrade of selinux-policy-targeted doing recursive restorecon on NFS mounts a bad idea

Daniel J Walsh dwalsh at redhat.com
Mon Mar 7 15:54:07 UTC 2005


Jason Vas Dias wrote:

>I'm now doing an upgrade to 
>selinux-policy-targeted-1.17.30-2.83 on FC3,
>and it seems to be doing a recursive restorecon
>on all the NFS mounts on the system - including
>/home/boston, /mnt/redhat, etc.
>
>I don't think this is a good idea at all! 
>This single update of selinux-policy-targeted
>is probably going to take all day, and I hope
>the restorecon on NFS mounts as root is not 
>going to harm other people's mounts of shared
>NFS systems like /home/boston and  /mnt/redhat !
>
>Restorecon in recursive mode should ignore NFS mounts -
>or the spec file should weed out NFS mounts from the
>restorecon command line.
>
>Should I raise a bug on this ?
>
>
>
>
>
>
>
>  
>
policycoreutils-1.18.1-2.10  should have this backported from rawhide.   
Available in fedora-testing




More information about the fedora-selinux-list mailing list