SELinux settings in SPEC file

Paul Howarth paul at city-fan.org
Fri Apr 14 11:52:40 UTC 2006


On Fri, 2006-04-14 at 08:52 +0200, Aurelien Bompard wrote:
> Gérard Milmeister wrote:
> > Looks good for a start. Don't you think using restorecon instead of
> > chcon would be safer? The probability of missing something is smaller.
> 
> I guess restorecon is better if you need to change a directory with
> different types in it. It clearer that multiple chcon's.
> Otherwise I think it can be left to the packager's preference.
> 
> > Do these scripts work when SELinux is not installed, resp. completely
> > disabled?
> 
> No idea. I'll add a TODO section to the page, and point feodra-selinux-list
> at it.

You can use /usr/sbin/selinuxenabled (if present) to determine whether
SELinux is enabled or not.

Paul.




More information about the fedora-extras-list mailing list