On Wed, 10 Jul 2002, Ed Street wrote:

> Speaking of make relabel. Would it not be a good idea to run a relabel
> at boot time?

Not unless you really want to reset the system to the initial state specified in file_contexts on each boot. The persistent label mappings track runtime changes made since the initialization, like file type transitions for new files and individual relabels via chcon. A 'make relabel' on each boot will lose such runtime changes unless you update your file contexts configuration or you exclude these files via <<none>> entries. 'make relabel' is also slow, as it must traverse the entire filesystem.

--
Stephen D. Smalley, NAI Labs
ssmalley@nai.com




--
You have received this message because you are subscribed to the selinux list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.