Activating selinux: Relabeling before reboot possible?

Karsten Wade kwade at redhat.com
Sat Jul 29 14:30:51 UTC 2006


On Sat, 2006-07-29 at 16:05 +0200, Axel Thimm wrote:
> Hi,
> 
> I upgraded an old system to FC5. Now I'd like to get selinux running,
> but I know that once I do it will relable the system upon
> reboot. Since this is a production system I'd like to keep downtime as
> low as possible.
> 
> Can I relabel the system before the reboot or skip relabeling the
> system upon reboot and relabel on the fly later? If yes, how? :=)

I probably know only the "old" method here.

restorecon would work, applied against the entire filesystem; the man
page is helpful.

You can see all the helpful commands here:

http://fedoraproject.org/wiki/SELinux/Commands

- Karsten
-- 
Karsten Wade, RHCE, 108 Editor    ^     Fedora Documentation Project 
 Sr. Developer Relations Mgr.     |  fedoraproject.org/wiki/DocsProject
   quaid.108.redhat.com           |          gpg key: AD0E0C41
////////////////////////////////// \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-selinux-list/attachments/20060729/1b323cc1/attachment.sig>


More information about the fedora-selinux-list mailing list