On Mon, 2004-11-22 at 10:54 -0500, Yuichi Nakamura wrote:
> Hello.
>
> I add setfiles "-x" option.
> I attach my idea in "setfiles.diff".
>
> -x option is used to exclude specified type.
>
> For example,
> # setfiles file_contexts /home -x httpd_user_rw_t
> setfiles skips relabeling files that have "httpd_user_rw_t".

I thought the conclusion from previous discussion on user-customizable file contexts was that we were going to add notation to file_contexts for groups of contexts, so that all of e.g.

system_u:object_r:httpd_sys_content_t,
system_u:object_r:httpd_sys_script_exec_t, 
system_u:object_r:httpd_sys_script_rw_t,

For example:

/var/www(/.*)? system_u:object_r:httpd_sys_content_t system_u:object_r:httpd_sys_script_rw_t system_u:object_r:httpd_sys_script_exec_t ...

--
This message was distributed to subscribers of the selinux mailing list.
If you no longer wish to subscribe, send mail to majordomo@tycho.nsa.gov with
the words "unsubscribe selinux" without quotes as the message.



application/pgp-signature attachment: This is a digitally signed message part