How to make SELinux file context permanent?

Ignacio Vazquez-Abrams ivazquez at
Mon Apr 3 23:22:00 UTC 2006

On Mon, 2006-04-03 at 23:30 +0200, Gérard Milmeister wrote:
> I have two packages, gcl and ecl, lisp compilers, that
> need a context change of some binaries from
>   system_u:object_r:lib_t
> to
>   system_u:object_r:textrel_shlib_t
> These files reside in subdirectories of /usr/lib. Is it
> possible to set context during RPM creation?
> In any case, the changes are not permament, because after
> a relabeling (or restorecon) of the filesystem, the context
> reverts to the default.
> What is the least painless way to do this correctly?

In FC5 it's to create a policy module and load it during %post. In FC4
it's to file a bug against selinux-policy-targeted.

Ignacio Vazquez-Abrams <ivazquez at>

gpg --keyserver hkp:// --recv-key 38028b72
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
URL: <>

More information about the fedora-extras-list mailing list