SElinux on upgraded machines

Daniel J Walsh dwalsh at redhat.com
Mon Dec 15 14:05:42 UTC 2008


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Bruno Wolff III wrote:
> On Fri, Dec 12, 2008 at 02:21:20 -0800,
>   Mike Cloaked <mike.cloaked at gmail.com> wrote:
>> However there is a residual issue in that with special configurations on
>> some partitions eg to store mail spools away from the root partition, then
>> the use of "semanage fcontext..." to create rules that will survive a
>> "restorecon -R" will be fine on the machine until it is next upgraded....
>> after a clean install of a newer Fedora then presumably a restorecon will
>> not remember the rules painstakingly created on the previous system?  Or is
>> there a way to copy those rules from a backup of the previous system?
> 
> "semanage fcontext -C -l" will list your local changes. Unfortunately the
> format of the output is not the same as the format for input. But if you
> don't have too many changes its not bad to do the set up again.
> 
What format would you like to see?  Patches accepted :^)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.9 (GNU/Linux)
Comment: Using GnuPG with Fedora - http://enigmail.mozdev.org

iEYEARECAAYFAklGZDYACgkQrlYvE4MpobNa4ACeLm9K0ljoKo7x198kzseFioCo
d40Anjs/rw1JOmajO+ACj5IjMNoIbvEo
=woKV
-----END PGP SIGNATURE-----




More information about the fedora-test-list mailing list