SElinux on upgraded machines

Bruno Wolff III bruno at wolff.to
Fri Dec 12 19:10:24 UTC 2008


On Fri, Dec 12, 2008 at 02:21:20 -0800,
  Mike Cloaked <mike.cloaked at gmail.com> wrote:
> 
> However there is a residual issue in that with special configurations on
> some partitions eg to store mail spools away from the root partition, then
> the use of "semanage fcontext..." to create rules that will survive a
> "restorecon -R" will be fine on the machine until it is next upgraded....
> after a clean install of a newer Fedora then presumably a restorecon will
> not remember the rules painstakingly created on the previous system?  Or is
> there a way to copy those rules from a backup of the previous system?

"semanage fcontext -C -l" will list your local changes. Unfortunately the
format of the output is not the same as the format for input. But if you
don't have too many changes its not bad to do the set up again.




More information about the fedora-test-list mailing list