the labeling procedure

Steve Brueckner steve at atc-nycorp.com
Mon Jun 27 18:07:32 UTC 2005


Stephen Smalley wrote:
> If you want to apply the same contexts, you can use setfiles -r. But
> note that there can be an advantage to using separate types on the
> chroot'd environment, and then not allowing any access by that
> process' domain to the base types used on the real filesystem.   
> 
> Any chance you can update to FC4?

I've got to release a beta this week so I'm sticking with FC3 at the moment.
I'll certainly upgrade for the next version.

I don't see the -r option in man setfiles.  Is it a new option in FC4?




More information about the fedora-selinux-list mailing list